Distributed network attack detection and security measurement system and method based on block chain

Abstract

The invention belongs to the technical field of wireless communication, and discloses a distributed network attack detection and security measurement system and method based on a block chain. Registering is performed at a network operation center and a certificate is obtained; a network operation center publishes a measurement task, a data provider provides security data, and a detection node collects security data items; the detection node performs network attack detection and security measurement; and a detection node manufactures a block, and finally consensus is performed. A network operation center is allowed to publish a measurement task, and a data provider provides security data; the detection node verifies the collected security data and carries out fused attack detection to obtain a detection result; and the detection nodes generate blocks, and finally consensus is achieved among the detection nodes. According to the invention, a data provider can be stimulated to provide security data, and detection nodes are stimulated to carry out fused attack detection and network security measurement; infeasibility of a single detection node is overcome, and bifurcation, low efficiency and centralization of the block chain are overcome.

Description

technical field [0001] The invention belongs to the technical field of wireless communication, and in particular relates to a blockchain-based distributed network attack detection and security measurement system and method. Background technique [0002] At present, the existing technologies commonly used in the industry are as follows: emerging networks are subject to different attacks due to their characteristics and vulnerabilities, such as heterogeneous networks, including the Internet, wireless sensor networks, and LTE mobile cellular networks. In order to ensure a secure network environment and provide high-quality services, the network operation center should perform network security detection and make corresponding responses. In order to measure the level of network security, it is necessary to integrate different attack detection mechanisms to detect major attacks. Obviously, it is unrealistic for a single network node to collect security data and perform integrated...

AI Technical Summary

Problems solved by technology

[0006] (1) Due to the complexity of network attacks, many researchers only develop detection mechanisms for one or several attacks, so there is no way to detect the main attacks in the network, which is not conducive to ensuring a safe network environment and high-quality services. so as to reduce the reputation of the network operation center (operator) and reduce its revenue

[0007] (2) According to the above problems, there is a lack of a method to detect the main attacks in the network, so there is also a lack of network security measurement model, so that the network security level cannot be evaluated in real time, which is not conducive to the timely response of the network, thereby reducing network security, and cannot guarantee High-quality service will eventually reduce the credibility of the network operation center and reduce its revenue

[0008] (3) Since the provision of security data and attack detection and security measurement need to consume resources, researchers have hardly considered incentives to provide security data sets and attack detection and security measurement, and a single detection node collects security data and performs attack detection and security measurement. It brings some problems: when it is invaded, the network crashes, the load is too high, the detection efficiency is low, and the single point of error

As a result, there is a lack of distributed network attack detection and security measurement in the form of incentives, so that credible and cooperative real-time detection of network attacks and measurement of network security cannot be performed, which ultimately leads to reduced revenue for network operation centers

[0009] (4) Since this patent uses blockchain to realize distributed network attack detection and security measurement, there are many problems in the blockchain technology involved, the main ones are fork, inefficiency and centralization risks

Images