Network security detecting method and device

Abstract

The invention discloses a network security detecting method and device and relates to the field of big data. The network security detecting method includes generating a network state diagram in real time according network communication states; matching a predetermined feature sub diagram in the network state diagram, wherein the predetermined feature sub diagram is a state diagram when errors of the network communication states occur; determining abnormal events corresponding to the predetermined feature sub diagram when the matching goes successfully. According to the invention, the sub diagram corresponding to abnormal states can be searched in the network state diagram generated in real time by adopting an image matching method and whether an abnormal state occurs in the network can bedetermined. Compared with a traditional keyword based search method, the diagram matching technology is more suitable for complex-mode search on data having high relevance, so that network security detection efficiency can be improved greatly.

Description

technical field [0001] The invention relates to the field of big data, in particular to a network security detection method and device. Background technique [0002] With the rapid development of the Internet, network data updates are becoming more and more frequent, and network security issues have also attracted much attention. The requirements for the accuracy and real-time performance of network security detection are getting higher and higher. Threat methods pose higher challenges to network security detection. [0003] Typical network security systems usually use pattern string matching technology for intrusion detection, anti-virus, and anti-spam detection. This method is computationally complex and inefficient, and can no longer meet the detection requirements of dynamic network data changes and large data volumes in the mobile Internet era. In many aspects such as network threat diagnosis, virus detection, network failure and vulnerability elimination, better netwo...

AI Technical Summary

Problems solved by technology

[0003] Typical network security systems usually use pattern string matching technology for intrusion detection, anti-virus, and anti-spam detection. This method is complex in calculation and low in efficiency, and can no longer meet the detection requirements of dynamic network data changes and large data volumes in the mobile Internet era.

Images