Method and system for detecting hazardous network source

Abstract

The invention discloses a method and a system for detecting a hazardous network source, and particularly relates to the method and the system for detecting the hazardous network source based on data fusion. The method and the system are applied to safety detection for daily visited websites. The system is characterized by comprising a system information acquisition module including a data packet capture and link analysis module, a system behavior analysis module including a webpage Trojan analysis, malicious code detection and suspected website detection module, a system behavior result processing module including in-depth behavior rules and evaluation data mining, fusion and the like, a data disaster tolerance module including local backup control and remote backup control, and an expert system module. The method and the system for detecting the hazardous network source disclosed by the invention can quickly and accurately find risky states and harmful ways and give out an alarm to a user to carry out further processing, and particularly the hazardous source can be found through analyzing layer upon layer.

Description

technical field [0001] The invention relates to a method and system for detecting the source of network harm, in particular to a method and system for detecting the source of network harm based on a data fusion method. It is an important part of network security construction and the premise and basis for completing network security alarms and smooth operation. technical background [0002] In the current network security field, there are complex and changeable web Trojan horses, malicious code intrusion, etc., which seriously endanger the security of the Internet. In this regard, traditional network hazard detection methods cannot achieve fast and accurate detection and identify the source of hazards, and cannot quickly build a perfect detection model for various hazard data collected. Contents of the invention [0003] In view of the shortcomings of the above-mentioned prior art, the present invention discloses a method and system for detecting the source of network haza...

AI Technical Summary

Problems solved by technology

[0002] In the current network security field, there are complex and changeable webpage Trojan horses, malicious code intrusion, etc., which seriously endanger the security of the Internet.

In this regard, traditional network hazard detection methods cannot achieve fast and accurate detection and identify the source of hazards, and cannot quickly build a perfect detection model for various hazard data collected

Images