Intrusion detection method and intrusion detection device based on data packets, and storage medium

Abstract

Embodiments of the invention disclose an intrusion detection method and an intrusion detection device based on data packets, and a storage medium, and relates to the field of network security. The method provided by the invention comprises the following steps: dividing a data stream into data packets during an intrusion detection process; generating a training package sample set and a test packagesample set based on the data packets, wherein the training package sample set comprises at least one training sample, and the test package sample set comprises at least one test package sample; taking the training package sample set as an input for training to obtain a strong classifier, wherein the strong classifier is composed of a plurality of base classifiers; constructing an intrusion detection model based on the strong classifier; taking the test package sample set as an input for testing the intrusion detection model, and obtaining a test result that comprises a normal state and an abnormal state. The invention can improve the performance of intrusion detection.

Description

Technical field [0001] The present invention relates to the field of network security, in particular to a data packet-based intrusion detection method, device and storage medium. Background technique [0002] With the development of network security technology, intrusion detection has become an issue of increasing concern. [0003] Most of the existing intrusion detection methods are based on the detection of a single data stream, but applying these methods directly to the detection of continuous attack behaviors (continuous multiple abnormal traffic) cannot accurately reflect the network security status in real time. For example, to detect DDOS attacks, only analyzing a certain data stream cannot detect intrusions. And for the detection of continuous attack behaviors, the use of a single data stream to continuously detect one by one also reduces the performance of the algorithm to a certain extent. Summary of the invention [0004] The embodiments of the present invention provide...

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide an intrusion detection method, device, and storage medium for data packets, which can solve the problem of low intrusion detection performance

Images