A device and a method for security lateral comparative analysis of Internet-of-Things

Abstract

The invention relates to a device and a method for security lateral comparative analysis of the Internet-of-Things. The Internet-of-Things comprises a cloud center and a device for communicating withthe cloud center. The device comprises a communication module, a statistical module, a comparative analysis module and a database. According to preset regional network segments set by a user, the userdivides the cloud center into several regions, obtains the data of the devices in any region, records the data to the database, constructs a white list, obtains the data of any device in the currentregion one by one, compares the data with the white list in the database, and reports the abnormal data to the cloud center. On the basis of collecting the data information of the device of the Internet-of-Things in the region, through the statistical principle, lateral comparative analysis of the multi-dimensional information and status of the Internet-of-Things device is carried out, and the abnormal attack activities of the Internet-of-Things device are explored quickly, so a faster and more efficient risk perception method is provided to users, and the ability of zero day risk perception is exhibited to a certain extent.

Description

technical field [0001] The present invention relates to the technical field of data exchange network, in particular to a device and method for laterally comparing and analyzing similar data in IoT devices to screen out suspicious data for further judgment. Background technique [0002] The Internet of Things is an Internet where things are connected. Its core and foundation are still the Internet. It is an extension of the Internet and a further expanded network. Its client end extends and expands to any item for information exchange and communication. [0003] With the popularity of IoT devices, the network security situation awareness capabilities of IoT devices have also attracted much attention. How to quickly and effectively mine the network risk situation of IoT devices is a problem. [0004] In the existing technology, it mainly relies on traditional firewall equipment, intrusion detection equipment, access equipment, etc. to perceive the network risk of IoT equipment...

AI Technical Summary

Problems solved by technology

[0005] The technical problem solved by the present invention is that in the prior art, the network risks of IoT devices are perceived through traditional firewall devices, intrusion detection devices, access devices, etc., or the possible abnormalities of a single device are manually analyzed. Since the IoT device itself does not have a "security module", traditional devices such as external firewalls and intrusion detection cannot accurately and effectively capture the risk activities that have occurred on the IoT device itself, and manual analysis of abnormal activities on the IoT device Lack of comparison and low efficiency, for this reason, the present invention provides an optimized device and method for horizontal comparative analysis of Internet of Things security

Images