49results about How to "Implement intrusion detection" patented technology

The invention provides an internet-based e-commerce platform intrusion detection method and computer equipment, which can judge whether a first user terminal is an intrusion terminal or not based on afirst order feature vector of an output order and a second order feature vector of a target order when an electronic order in an electronic order information set is the output order. When an electronic order in an electronic order information set is an input order, whether a first user terminal is an intrusion terminal or not can be judged based on a user behavior track of a third user terminal interacting with the first user terminal. Thus, the intrusion terminal of the first user terminal can be judged based on the electronic order information, intrusion detection on the online e-commerce platform provided by the computer equipment is further realized, the intrusion detection effect on the online e-commerce platform is ensured, and the security of the privacy information of the user terminal interacting with the online e-commerce platform is ensured.

The invention discloses a host intrusion detection method based on a relational network, comprising: step 1, characterizing the host system call sequence sample set; step 2, dividing the data set processed in step 1 into training sets, supporting Set and test set; Divide the training set into sample set and query set again; Step 3, construct relational network model; Described relational network model includes embedding module, connection module and relational module; Step 4, define the target of relational network model Function; step 5, train the constructed relational network model to obtain the host intrusion detection model; step 6, input the trained host intrusion detection model into the host intrusion detection model after step 1 to detect the host system call sequence to be detected. The invention proposes a host intrusion detection method based on a relational network, which can realize host intrusion detection of existing intrusion modes and host intrusion detection of unknown intrusion modes under the condition of small samples.

The invention provides a fiber intrusion detection method using time-space 2D sparseness of vibration signals to represent K-S test, and aims at a fiber intrusion early-warning system. The method comprises CFAR (Constant False Alarm Rate) detection is carried out on signals of different positions via the CFAR, time-domain K-S test is carried out on data, over-threshold CFAR data is grouped to obtain time-domain to-be-tested data sets, the time interval between data in each time-domain to-be-tested data set is compared with that of prior interference intrusion signals via K-S test, if distribution of the time interval is the same, the detected data set includes interference intrusion signals, and if distribution is different, amplitude K-S test is carried out, namely, the amplitude of data in each time-domain to-be-tested data set is compared with that of the prior interference intrusion signals via K-S test, if distribution of the amplitude is the same, the detected data set is an interference intrusion group, and otherwise, the set is a potential harmful intrusion group. The method detects the intrusion signals in the space-time 2D manner, influence of interference intrusion can rejected, and potential harmful intrusion information is obtained.

The invention features the physical engine of an Intrusion Detection System that virtualizes multi engines, by which the classified protection can be made according to the network condition of client, VLAN TAG information, IP address information or MAC address information. On each virtual engine, different detection strategy and security strategy standard can be executed and set in order to implement the object-oriented intrusion detection.