Distributed hacker tracking system in controllable computer network

Abstract

The present invention is one distributed hacker tracking system in controllable computer network based on network invasion detection and data fingerprint technology. Inside one enclosed and controllable network system, network monitors are set in all shared network sections to send the invasion alarm information to the managing device. In case that some monitor finds invasion, the managing device will check corresponding record to back track the message path and to determine the network section the hacker is in or to determine the initial source. The system has excellent expandability and real-time property and is suitable for large hetero network.

Description

technical field [0001] The invention relates to distributed processing of computer information network security, in particular to a hacker tracking method of a controllable computer network. Background technique [0002] Computers and the Internet have become one of the most important information infrastructures of a country. Protecting the security of these facilities so that they are not damaged by hostile countries, computer hackers and other computer criminals is a necessary condition for protecting the country's sovereign integrity and information security, and ensuring the normal operation of industries and departments such as government, finance, commerce, and technology. . [0003] If you can obtain the real address of the hacker, record relevant evidence, and take it to law, you can effectively deter cybercrime and computer crime, and maintain the security of the network and computer system. Although hacker tracking is of great security significance, in the networ...

AI Technical Summary

Problems solved by technology

However, it still needs to save the sequence number information of all TCP connections, and it can only be compared centrally, which is difficult in large-scale network applications; at the same time, if the network transmission time fluctuates greatly, the error generated by this method will also follow. increases; for connections with shorter durations, the resulting error is also larger

[0072] However, most of the existing intrusion detection systems focus on the discovery and prevention of attacks. Although most network-based attacks can be detected, it is difficult to trace the real source of hackers.

Images