A network attack defense method based on big data
A big data and anti-attack technology, applied in the field of network security and big data information, can solve the problems of network attack information transmission equipment, loss, and increase in the scope of network attacks, so as to ensure traceability and queryability, and ensure safety and effectiveness. , to avoid the effect of information silos
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0051]According to an embodiment of the present invention, a network attack defense method applied to the first detection node is proposed, such as figure 1 shown, including:
[0052] Step 101: the first detection node receives a detection request from a user, detects the device where it is located, and obtains detection data;
[0053] Specifically, the first detection node receives the detection request from the user, detects the security status of the device where it is located to obtain detection data, and records the detection time stamp.
[0054] Step 102: The first detection node analyzes the detection data obtained, and when the analysis result shows that there is a network attack behavior on the device, it generates alarm data according to the obtained detection data and sends it to the first node server for the first node server to analyze in the big data dissemination of information in the network.
[0055] According to an embodiment of the present invention, gener...
Embodiment 2
[0063] According to an embodiment of the present invention, a network attack defense method applied to the first node server is proposed, such as figure 2 shown, including:
[0064] Step 201: the first node server receives the alarm data from the first detection node;
[0065] Step 202: the first node server verifies the received alarm data, and when the verification is passed, sends the alarm data to each second node server for consensus verification by each second node server.
[0066] According to an embodiment of the present invention, in step 202, the first node server verifies the alarm data, including:
[0067] Step B1: The first node server parses the received alarm data to obtain the detection data summary, detection data ciphertext, detection time stamp and first device identification;
[0068] Specifically, the detection data abstract, detection data ciphertext, detection time stamp and first device identification in the alarm data are read according to a preset ...
Embodiment 3
[0079] According to an embodiment of the present invention, a network attack defense method applied to the second node server is proposed, such as image 3 shown, including:
[0080] Step 301: the second node server receives the alarm data sent by the first node server;
[0081] Specifically, the second node server receives the detection data summary, the detection time stamp, the first device identifier, and the second device identifier sent by the first node server.
[0082] Step 302: The second node server performs consensus verification on the received alarm data, and sends an attack blocking command to the corresponding second detection node when the verification is passed.
[0083] According to an embodiment of the present invention, in step 302, the second node server performs consensus verification on the received alarm data, specifically: verifying whether the received second device ID is a valid device ID, if yes, it is determined that the verification is passed; ot...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 


