Eagle eye early warning system

Abstract

The invention discloses an eagle eye early warning system comprising a learning module, a simulation module, a monitoring module, a processing module, an alarm module and a storage module, wherein thesimulation module performs simulation and camouflage according to learning data of the learning module and generates a plurality of virtual probes with virtual data; the monitoring module separatelymonitors the virtual probes; the processing module receives the monitoring data of the monitoring module, judges a threat grade according to the monitoring data, disconnects the network or continues the monitoring according to the threat grade and sends an alarm signal to the alarm module; the alarm module receives the alarm signal and sends alarm information; and the storage module is used for storing the monitoring data and the processing data of the processing module so as to monitor the network in real time and discover the network threat in time, takes initiative and effective measures toavoid the caused losses so as to ensure the network security of the user.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an eagle eye early warning system. Background technique [0002] APT (Advanced Persistent Threat) is a new type of network attack that poses a serious threat to national defense security, national economic security, important industry information security, and company business information security. APT uses advanced attack methods to carry out long-term continuous network attacks on specific targets. The principle of the attack is more advanced and advanced than other attack forms. Accurate collection of processes and target systems. During the collection process, this attack will actively dig out the vulnerabilities of the trusted system and application program of the attacked target, and use these vulnerabilities to build the network required to access the host. [0003] At present, the measures taken against the APT crisis are mainly to install a network security ea...

AI Technical Summary

Problems solved by technology

However, for threats lurking in the analysis of massive data, the above defense measures have loopholes, and it is difficult to analyze all massive data, so lurking APT attacks may be missed, and the accuracy of APT attack defense is low

Images