Eureka AIR delivers breakthrough ideas for toughest innovation challenges, trusted by R&D personnel around the world.

Distributed migration network learning-based intrusion detection system and method thereof

A network learning and distributed technology, applied in the field of intrusion detection system and information security, can solve the problems of low detection rate of network behavior, time-consuming, and inability to use

Inactive Publication Date: 2011-07-20
XIDIAN UNIV
View PDF0 Cites 3 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] 1. There is an imbalance in the detection rate of network behaviors for different types of attacks, and the detection rate of network behaviors for certain types of attacks is very low;
[0005] 2. If the detection rate is to be improved, the user needs to collect data and learn again, which is expensive and time-consuming;
[0006] 3. Inability to use other existing available resources to improve the network behavior detection rate of certain attack types

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Distributed migration network learning-based intrusion detection system and method thereof
  • Distributed migration network learning-based intrusion detection system and method thereof
  • Distributed migration network learning-based intrusion detection system and method thereof

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0050] The present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0051] refer to figure 1 , the intrusion detection system based on distributed migration network learning of the present invention mainly includes: a network behavior record preprocessing module, an abnormality detection module and an abnormal behavior analysis module. in:

[0052] The network behavior record preprocessing module includes: an existing record preprocessing submodule and a new record preprocessing submodule. The existing record preprocessing submodule is used to complete the quantization and normalization processing on the existing labeled network behavior record set, and pass the parameters after quantization and normalization processing into the new record preprocessing submodule; the new record preprocessing submodule The processing sub-module uses the parameters passed in by the existing record pre-processing sub-module t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a distributed migration network learning-based intrusion detection system and a method thereof, and mainly solves the problems that the prior method has low efficiency in detection of some attack types and is difficult to search data again. The whole system comprises a network behavior record preprocessing module, an abnormality detection module and an abnormal behavior analyzing module. The network behavior record preprocessing module completes the quantification and normalization processing of a network behavior record; the abnormality detection module uses an abnormality detection learning machine to completes the classification and identification for an input record, determines whether the record is a normal behavior, and completes the detection if the record isa normal behavior or transmits the record to the abnormal behavior analyzing module if the record is an abnormal behavior; and the abnormal behavior analyzing module uses an abnormal behavior analyzing learning machine to carry out the classification and identification of the input records and outputs the attach type of the record. The system and the method have the advantages of using other existing resources to improve the detection rate for the prior attach types with low detection rate and avoiding searching the data again and can be used for network intrusion detection.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to an intrusion detection system, which can be used for intrusion detection in the aspect of information security. Background technique [0002] With the widespread use of the Internet, more and more illegal attacks on computer networks have threatened the security of information systems. Network security systems based on passive management such as firewalls have backdoors at the application layer and unauthorized operations by internal users. The resulting attack or theft or destruction of information has been powerless, and the firewall itself is vulnerable to attacks, often helpless for internal network security issues. As an important supplementary measure of the network security protection tool "firewall", the intrusion detection system (IDS) shows increasing importance. IDS can resist attacks from the internal network, prevent hackers from invading and prevent the ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/26H04L29/06H04L29/08
Inventor 缑水平焦李成王宇琴田小林王爽马文萍吴建设慕彩红冯静
Owner XIDIAN UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Eureka Blog
Learn More
PatSnap group products