Method, device, storage medium and electronic device for defending data stream attack

Abstract

The present disclosure relates to a method, device, storage medium and electronic device for defending data stream attack; the data stream and the whole network security rules can be obtained throughthe terminal, and determine the attack data stream from the data stream according to the whole network security rules. At the same time, threat identification is performed on the attack data stream togenerate a threat identifier, the threat identifier indicates the threat level corresponding to the attack traffic; the attack traffic is sent to the honeypot server, so that the honeypot service enddecoys the attack data stream according to the threat level indicated by the threat identification, the terminal sends the attack data stream to the honeypot service end, and the honeypot service enddecoys the attack data stream, thereby reducing the occupation of the terminal resources and improving the data processing efficiency of the terminal.

Description

technical field [0001] The present disclosure relates to the communication field, and in particular, relates to a method, device, storage medium and electronic equipment for defending against data flow attacks. Background technique [0002] With the rapid development of information technologies such as the Internet of Things, cloud computing, and big data, the industrial manufacturing industry has gradually broken the previous closedness and deeply integrated industrial control terminals with information technology, thus presenting characteristics such as networking and intelligence. , based on information technology, while improving productivity and enhancing innovation of industrial control terminals, serious network security problems have also emerged. At present, there are mainly two types of attacks on industrial control networks: one is to steal industrial control information, and the other is to destroy The operation of the industrial control network, in this way, has...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of information technologies such as the Internet of Things, cloud computing, and big data, the industrial manufacturing industry has gradually broken the previous closedness and deeply integrated industrial control terminals with information technology, thus presenting characteristics such as networking and intelligence. , based on information technology, while improving productivity and enhancing innovation of industrial control terminals, serious network security problems have also emerged. At present, there are mainly two types of attacks on industrial control networks: one is to steal industrial control information, and the other is to destroy The operation of the industrial control network, in this way, caused huge losses to industrial manufacturing enterprises

[0003] Honeypot technology, as an active defense network trapping technology, can directly deploy honeypots on terminals such as computers, so that when the attack data flow attacks the computer, the honeypot can directly lure the attack data flow to Realize the long-term monitoring, detection, analysis and early warning of the attack data flow, so as to ensure that the network can be in a safe state. However, due to the limited resources of the industrial control terminal, the processing capacity of the industrial control terminal is limited. Therefore, if The honeypot is directly configured on the industrial control terminal, and the honeypot takes up a lot of resources, thereby reducing the operating speed of the industrial control terminal, thereby reducing the efficiency of data processing by the industrial control terminal

Images