Intrusion detection method and intrusion detection system based on cloud computing

Abstract

The invention relates to an intrusion detection method based on cloud computing and an intrusion detection system based on cloud computing, wherein an intrusion detection and analysis function is separated to a cloud from a conventional host side, and is provided at the cloud in the form of service. Complexity of deployment of the intrusion detection system at the host side is simplified and cost is reduced, meanwhile, a core intrusion detection and analysis service is located at the cloud, and the intrusion detection service is updated and maintained more efficiently by a cloud service provider through a more professional network security team. The method and the system realize high-efficiency and accurate intrusion detection and analysis under the premise of guaranteeing that time delay is very short, and have very high practical value. So far, the intrusion detection method based on cloud computing provides a highly reliable, highly steady and easy-to-use network security cloud service for users through deploying the intrusion detection service on a cloud server, thus, security of websites is improved greatly, and maintenance cost of the websites is reduced.

Description

technical field [0001] The present invention relates to the comprehensive fields of cloud computing, Internet security, software cloud service development and intrusion detection, and more specifically, relates to a cloud computing-based intrusion detection method and a cloud computing-based intrusion detection method system. Background technique [0002] The introduction of the concept of "Internet +" means that the application of Internet technology will take a further step, especially network applications and services, which also put forward higher requirements for network security. Website servers are often the primary target of malicious attacks or hijacking by attackers, and with the popularity of high-speed networks, the intensity of attacks continues to increase. Through real-time monitoring and analysis of host network traffic, resource status and behavior, timely detection of malicious intrusion attacks is of great significance to ensure the normal operation of the...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to overcome the deficiencies of the prior art, provide an efficient and accurate intrusion detection service by deploying the intrusion detection as a software service on the cloud server, and solve the high complexity of the deployment application mode of the current intrusion detection system , high cost, difficult to maintain and update, large host resource consumption and other intrusion detection methods based on cloud computing, and intrusion detection systems based on cloud computing

Images