Method and system for identifying network attack

Abstract

The invention provides a method and a system for identifying network attack. The method comprises the following steps: positioning duration time of abnormal flow of an outlet of a computer room; extracting original flow data in the positioned duration time of the abnormal flow of the outlet of the computer room; judging whether the extracted original flow data is attack data, and identifying that the network attack exists if the extracted original flow data is the attack data. By adopting the method and the system for identifying the network attack, the low cost can be retained; meanwhile, the stability and the specialty of identifying the network attack can be ensured.

Description

technical field [0001] The present invention relates to the communication field, and more specifically, to a method and system for identifying network attacks. Background technique [0002] As the business scale of Internet companies grows, more and more users use and access the company's applications and services. However, the large traffic impact caused by unknown network attacks will affect the normal use of services, and will also push up traffic to affect the company's broadband cost billing. Timely detection of cyber attacks not only buys time for taking countermeasures, but also provides data support for subsequent cost negotiations with operators. [0003] However, due to the huge business traffic of Internet companies, conventional network security products and methods are difficult to deal with, and higher costs (such as hardware resources) need to be invested to support the business needs of discovering network attacks. In this regard, some companies have turned...

AI Technical Summary

Problems solved by technology

[0003] However, due to the huge business traffic of Internet companies, conventional network security products and methods are difficult to deal with, and higher costs (such as hardware resources) need to be invested to support the business needs of discovering network attacks

In this regard, some companies turn to self-developed network security equipment and solutions, but they lack stability, professionalism, and are even difficult to operate and maintain.

Images