Extension defense method based on network intrusion

Abstract

The invention belongs to the technical field of network security and discloses an extension defense method based on network intrusion. According to actual situations of intrusion behaviors of intruders, intentions and purposes of the intruders are analyzed and judged by building a trap network, related trap network node devices constituting the trap network are disconnected or connected or added or removed in real time, therefore, targets to which the intruders pay attention are changed, the intrusion priorities are changed, bait resource deployment and configuration are changed, objects intruding and percolating into the network are controlled, and delaying, monitoring, tracking, analyzing, source tracing and evidence obtaining are conducted on intrusion processes of the intruders. According to the method, an existing network can be built or deployed completely, the active defense capability of the network can be further enhanced, and the method is a novel, deep and multi-dimensional network defense strategy.

Description

technical field [0001] The invention relates to the technical field of computer network security, in particular to an extended defense method based on network intrusion. Background technique [0002] With the rapid development of network technology, network security issues are becoming more and more serious. The frequent occurrence of various types of network intrusion and penetration incidents not only brings great harm to users, but also promotes the development of today's network defense technology. Traditional passive network defense technologies, such as firewalls and vulnerability scanning tools, are increasingly unable to meet today's network protection requirements. On the other hand, the processing flow of traditional network defense methods can only obtain the most general performance characteristics for the discovery of certain attacks and infiltrations, and the intruder's behavior, motivation, method, source and other in-depth attack processes are often insuffic...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to provide an extended defense method for network intruders, to overcome the inability of the existing technology to fully obtain the intruder's behavior, motivation, method, and source, which directly leads to the inability to effectively monitor the intruder in real time , attack delay, source tracking, behavior analysis and active countermeasures

Images