Self-adapting network intrusion detection system

An intrusion detection system and adaptive network technology, applied in transmission systems, digital transmission systems, data exchange networks, etc., can solve the problems of high application and deployment costs and low efficiency of anomaly detection systems, reducing deployment costs and improving detection. performance, the effect of improving the adaptive ability

Inactive Publication Date: 2009-10-21
CHONGQING UNIV
View PDF0 Cites 10 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, the traditional method of manually collecting training samples by network experts is inefficient and leads to the problem of high application and deployment costs of anomaly detection systems

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Self-adapting network intrusion detection system
  • Self-adapting network intrusion detection system
  • Self-adapting network intrusion detection system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0016] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments.

[0017] Such as figure 1 , figure 2 As shown, the adaptive network intrusion detection system includes: message preprocessing and forwarding module 1, real-time database 2, feature data sorting and storage module 3, historical database 4, semi-supervised adaptive learning module 5, anomaly detection module 6, Abnormal response module 7 , misuse detection module 8 , output device 9 , input device 10 . The message preprocessing and forwarding module 1 is respectively connected to the real-time database 2 and the misuse detection module 8, and the message preprocessing and forwarding module is used to store the extracted network connection feature vector into the real-time database 2, and simultaneously store the network connection object The non-encrypted message in is forwarded to misuse detection module 8; This misuse detection module 8 sends...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a self-adapting network intrusion detection system, and the system comprises a message pre-processing and forwarding module, a misuse detection module, an abnormality responding module and an output device. The message pre-processing and forwarding module is used for extracting non-encrypted messages in network connecting objects and forwarding the messages to the misuse detection module which is used for forwarding the detected abnormal network connecting objects to the abnormality responding module. The system is characterized by also comprising a real-time database, a feature data arranging and storing module, a historical database, a semi-supervised self-adaptive learning module and an abnormality detection module which is used for analyzing the network connecting feature vectors in the real-time database and forwarding the detected abnormal network connection to the abnormality responding module. The beneficial effect of the system is as follows: the system uses the semi-supervised self-adaptive learning module to establish the rule of abnormality detection according to the data in the historical database, a lot of artificially-marked training data is not needed, thus reducing the deploying cost of the abnormality detection system.

Description

technical field [0001] The invention relates to a computer network intrusion detection system, in particular to an adaptive network intrusion detection system integrating anomaly detection technology and misuse detection technology. Background technique [0002] As one of the most important active network security measures at present, network intrusion detection effectively supplements and perfects the security measures such as access control, data encryption, firewall, virus prevention, etc. by identifying and responding to malicious network connections on computers and network resources. Security measures, which improve the integrity of the information security infrastructure, have become an integral part of information system security solutions. Network intrusion detection technology can be divided into misuse detection technology and anomaly detection technology according to its working principle. Among them, the misuse detection technology is based on the feature match...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/24H04L29/06
Inventor 钟将温罗生韩亮蒲秀娟熊辉余传祥
Owner CHONGQING UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap