System for detecting network intrusion of next generation key information infrastructure based on cloud computing

Abstract

A system for detecting network intrusion of a next generation key information infrastructure based on cloud computing comprises a client module, a communication module and a cloud module; wherein theclient module is used for acquiring data packages from a network, analyzing and processing the data packages to extract data information, performing standardized processing and dimension reducing processing for the extracted data information, and transmitting the processed data information to the cloud module through the communication module to perform intrusion detection and storage; the cloud module is used for detecting the received data information after dimension reducing processing to judge whether there is an intrusion behavior, and transmitting a judged result to the client module through the communication module. The system of the invention has the beneficial effects that: a support vector machine and a particle swarm optimization algorithm are introduced into the intrusion detection technology, dimension reduction processing and redundant information elimination processing are performed for network intrusion data through adoption of a gray relative analysis method, thereby reducing the dimension number of input of the support vector machine, effectively raising detection rate of intrusion detection, and improving detection speed at the same time.

Description

technical field [0001] The invention relates to the field of key information infrastructure security detection, and in particular to a next-generation key information infrastructure network intrusion detection system based on cloud computing. Background technique [0002] With the gradual extension of network-based services to various fields of society and the substantial increase in the amount of confidential information in the network, network security technology has become more and more important. How to effectively detect and prevent network intrusion to protect network data Its security has also begun to receive the attention and attention of people from all walks of life. The traditional network defense is a firewall. The firewall has the advantages of simplicity, practicality and high transparency. It can meet certain security requirements without modifying the original network system. However, the firewall is only a network security tool for passive defense. The fire...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the problem that the traditional intrusion detection system handles heavy data load and does not support multi-host data joint analysis, the present invention proposes a next-generation key information infrastructure network intrusion detection system based on cloud computing. Cloud computing has flexibility and rapid scalability , high reliability, security and other characteristics, using cloud computing for network intrusion detection can support multi-process concurrent processing, effectively reducing the processing time, improving the processing accuracy, and greatly reducing the workload of the client

Images