Immune network system

Abstract

The invention belongs to the Internet field and provides an immune network system. The immune network system comprises a transparent firewall, an intelligent tour-inspection device and an emergency device, wherein the transparent firewall is used for analyzing the present network scanning technology, extracting universal scanning features and taking the universal scanning features as filtering rules for filtering; the intelligent tour-inspection device is used for auditing and monitoring flow entering the network, offering abnormal flow treatment proposals, communicating with a host computer generating abnormal flow, extracting features of attack fingerprints and saving the attack fingerprints in an immune feature library; the emergency device is used for providing an emergency channel for detected damaged intranet nodes and reminding a user of restoring the damaged nodes to the safe state before attacking after the user completes work. According to the invention, the network flow is monitored and audited to keep the network in a good state, unknown invasion actions are analyzed and memorized to improve the network immunocompetence, the hazard range can be effectively controlled after invasion to guarantee network connection and normal service providing, and the system has an autonomous remediation and restoration capacities and can comprehensively maintain stable network operation.

Description

technical field [0001] The invention belongs to the field of the Internet, in particular to an immune network system. Background technique [0002] Information security issues generally exist in various aspects such as social economy, military technology, national security, intellectual property rights, commercial secrets and even personal privacy. Network security is a key issue that has been studied in the field of computer network and its application. However, the traditional network security theory and technology have the following three insurmountable defects. Firstly, the method of centralized control seems powerless for the current distributed network environment; secondly, the network has isomorphism, which cannot prevent suspicious intruders and viruses from spreading rapidly and widely; Sexuality and passivity can no longer adapt to the harsh and changeable network environment. [0003] At present, looking at domestic and foreign research, survivability research ...

AI Technical Summary

Problems solved by technology

[0004] The embodiment of the present invention provides an immune network system, aiming to solve the problem that the intrusion of suspicious programs and the rapid spread of viruses cannot be prevented in the prior art

Images