Internet hosting website detection method and system based on network access behavior analysis and readable storage medium

A behavior analysis and network access technology, applied in the field of network security, can solve the problems of single monitoring technology, low cost performance, and high cost

Active Publication Date: 2019-12-13
STATE GRID HUNAN ELECTRIC POWER +2
View PDF9 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] At present, the enterprise's monitoring technology for Internet hosting websites is relatively simple, mainly relying on crawling data from the Internet and analyzing them
The accuracy of this method largely depends on whether the crawled network data source is rich, and the richer the network data source means the more massive data, the more massive data, the larger the scale of the web crawler cluster and the Network bandwi

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Internet hosting website detection method and system based on network access behavior analysis and readable storage medium
  • Internet hosting website detection method and system based on network access behavior analysis and readable storage medium
  • Internet hosting website detection method and system based on network access behavior analysis and readable storage medium

Examples

Experimental program
Comparison scheme
Effect test

Example Embodiment

[0051] The present invention will be further described below with reference to the drawings and embodiments.

[0052] figure 1 It is the framework flow chart of the method for detecting Internet hosting websites based on network access behavior analysis implemented in the present invention. This method first filters out the http and https protocol data packets from the mirrored network traffic, and then extracts the source IP (located on the corporate intranet), destination port, host field (located on the Internet), and access path (path Field), http method. These data packet information will be further aggregated into statistical information of access behavior within a specified period of time, including the number of access to each source IP, the department code of the source IP, whether the http method is ‘post’, etc. Data packet information and statistical information are input into multiple access feature extraction modules to obtain normalized source IP entropy, normaliz...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an Internet hosting website detection method and system based on network access behavior analysis and a readable storage medium. According to the method, Internet access behavior characteristics in network traffic are extracted regularly, the probability that each accessed Internet website is an enterprise trusteeship website is calculated by utilizing the extracted characteristics, and website trusteeship detection is realized so as to assist enterprise security technicians in judgment. According to the scheme, the general network topology characteristics of enterprises are deeply combined, the access behavior characteristics of the Internet hosting website are analyzed based on the network traffic, the method does not depend on an enterprise keyword library, keyword matching does not need to be carried out on the load of the network traffic packet, and the operation efficiency and accuracy are high.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method, system and readable storage medium for detecting an Internet hosting website based on network access behavior analysis. Background technique [0002] The enterprise's information system stores sensitive data of the enterprise. If the enterprise information system is deployed on the Internet server, it will not be supervised and protected by the enterprise's network security, and it will be easily attacked by hackers, leading to information leakage or even data tampering. Large enterprises with server equipment and independent operation and maintenance capabilities usually prohibit the Internet hosting of information systems. [0003] At present, the enterprise's monitoring technology for Internet hosting websites is relatively simple, mainly relying on crawling and analyzing data from the Internet. The accuracy of this method largely depends on whether the crawled netwo...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06
CPCH04L63/1416
Inventor 朱宏宇田建伟乔宏陈圣晟
Owner STATE GRID HUNAN ELECTRIC POWER
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap