Cloud-computing oriented network intrusion detect method and system

Abstract

The invention discloses a cloud-computing oriented network intrusion detect method. The method comprises the steps of generating a pseudo-gradient promotion decision-making tree set for judging network intrusion behaviors; determining weight information of pseudo-gradient promotion decision-making trees according to classification features of non-leaf nodes corresponding to the pseudo-gradient promotion decision-making trees; carrying out parallel judgment on received network behavior records through adoption of the pseudo-gradient promotion decision-making trees, thereby obtaining independent judgment results; and multiplying the independent judgment results by the corresponding weight information, thereby generating final result information for judging whether the network behavior records are network attacks or not. The method and the system are characterized in simplicity, legibility, high distinguishing precision and high smart comprehensive processing capability. The pseudo-gradient promotion decision-making tree can be generated in a distributed parallel mode under a cloud computing environment. The dynamic update operation speed of the decision-making threes is improved, and the timeliness and accuracy of detecting new-type intrusion events by an IDS are improved.

Description

technical field [0001] The invention relates to the technical fields of network security and cloud computing, in particular to a cloud computing-oriented network intrusion detection method and system. Background technique [0002] In recent years, information security incidents represented by network intrusions have emerged in an endless stream. Intruders use the Internet as a tool to steal information, spread Trojan horses and viruses, and maliciously consume resources, causing huge losses to users and greatly affecting and destroying the Internet. further promotion and use. Designing and using Intrusion Detection (IDS) methods to monitor network applications, discover and control malicious network intrusions in time, has become an important barrier of network security. [0003] In the current network intrusion detection technology, the IDS based on the decision tree classification algorithm has been widely concerned because of its advantages of simple structure, easy-to-u...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a network intrusion detection method and system to solve the problems of high misjudgment rate and low operation speed in the existing intrusion detection technology

Images