Threat detection system and method based on group intelligence theory

Abstract

The invention belongs to the technical field of network security, in particular to a threat detection system and method based on a group intelligence theory. The system includes: a heterogeneous static detector, which is embedded into cloud nodes in a cloud environment and which carries out threat detection by monitoring cloud node ports; a heterogeneous dynamic detector, which is hung to the cloud nodes in the cloud environment and which carries out threat detection by a dynamic walking mode; a detection domain construction module, which determines a detection domain according to a task execution environment and security protection requirements under the cloud environment, dynamically adjusts the detection domain according to the change of the context environment and realizes dynamic reconstruction of the detection domain through information sharing of the detection domain; and a group cooperation module, which utilizes the static detector and the dynamic detector to carry on threat closure detection of the static detector early warning and the dynamic detector joint decision in the detection domain. Through a decentralized detection structure and a detector linkage mechanism of group cooperation, the accuracy and the efficiency of threat detection under the cloud environment are improved, and the safety and the reliability of a network are improved.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a threat detection system and method based on crowd intelligence theory. Background technique [0002] Cloud computing is an important enabling technology in the network information age. At present, the global information and communication infrastructure is accelerating cloud reconstruction, and cloud computing has evolved into an important ICT (Information Communications Technology) technical architecture. As early as January 2011, the report on the top ten strategic technologies of the IT industry listed cloud computing technology as the first of the top ten strategic technologies. Well-known IT companies such as Google, IBM, Microsoft, Amazon, Tencent, and Alibaba are vigorously developing and promoting cloud computing. focus of attention. In the cloud computing environment, there are both commonality and particularity of cyberspace security issues. Am...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the problem that existing cloud computing detection mechanisms and methods are difficult to balance between effectiveness and lightweight, the present invention provides a threat detection system and method based on crowd intelligence theory, through the detection of decentralized detection architecture and group collaboration The machine linkage mechanism improves the accuracy and efficiency of threat detection in the cloud environment

Images