Network Security Protection Method and Apparatus

A computer program product, comprising:

• a computer-readable medium comprising executable code for causing at least one computer to:
• obtain at least one of network environment data or threat detection data of a host that is in a protected network, wherein the network environment data comprises at least one of the following:
• an identifier of an operating system, a parameter of the operating system, an identifier of software with a network port access function, or a parameter of the software, wherein the threat detection data comprises at least one of the following:
• a threat type or a threat identifier, and wherein the threat type comprises at least one of a vulnerability or a malicious program;
• search, according to the obtained at least one of network environment data or threat detection data, for corresponding information used to eliminate a security threat in the host;
• and
• provide the host with the information that is used to eliminate the security threat in the host.

A network security protection device, comprising:

• a memory configured to store program code and data;
• a network interface configured to obtain at least one of network environment data or threat detection data of a host that is in a protected network and that is connected to the network security protection device, wherein the network environment data comprises at least one of the following:
• an identifier of an operating system, a parameter of the operating system, an identifier of software with a network port access function, or a parameter of the software, wherein the threat detection data comprises at least one of the following:
• a threat type or a threat identifier, and wherein the threat type comprises at least one of a vulnerability or a malicious program;
• and
• a processor configured to read the program code and the data that are stored in the memory in order to perform the following operations:
• searching, according to the at least one of network environment data or threat detection data obtained using the network interface, for corresponding information used to eliminate a security threat in the host;
• and
• providing, using the network interface, the host with the information used to eliminate the security threat in the host,
• wherein the processor, the memory, and the network interface communicate with each other using a bus.