WAF safety monitoring system based on intelligent algorithm

Abstract

The invention discloses a WAF safety monitoring system based on an intelligent algorithm. The WAF safety monitoring system works according to the steps of (1) obtaining network events according to a data event collecting unit, conducting preprocessing on the network events, and enabling the network events to serve as system input, (2) connecting system output to an event classification processing unit to process the classified events, (3) conducting concrete analysis on event information with a central processing unit for connecting the data event collecting unit and the event classification processing unit, (4) storing the event information into a database through a data storage device in the central processing unit, and (5) enabling a rule base to be used as a training set by the central processing unit, building a Bayesian network analyzer, and analyzing the event information. By means of the WAF safety monitoring system, information in network access events is automatically monitored, the security of the network access events is automatically identified, and the network access events are automatically processed. By means of the WAF safety monitoring system, the network access events are continuously sampled, an accurate safety monitoring mechanism is provided, and APT attacks are effectively and accordingly prevented.

Description

technical field [0001] The invention relates to WAF network security detection technology, in particular to a WAF security monitoring system based on an intelligent algorithm to effectively prevent APT attacks, which can effectively detect and distinguish unknown APT attacks through system self-learning. Background technique [0002] While WEB applications are becoming more and more abundant, WEB servers have gradually become the main attack target due to their powerful computing power, processing performance and higher value. Security incidents such as SQL injection, webpage tampering, and webpage hanging horses occur frequently. Network security, especially Internet security is facing unprecedented challenges, mainly from new types of attacks and threats that are organized, have specific targets, and last for a long time, namely APT (Advanced Persistent Threat) - advanced persistent threat. [0003] APT refers to an attack form in which organizations (especially governmen...

AI Technical Summary

Problems solved by technology

However, for unknown threats without relevant rules in the rule base, the WAF security monitoring system cannot detect the corresponding threats and attacks

Images