Cloud identification method for abnormal behaviors of Internet of Things equipment

Abstract

The invention discloses a cloud identification method for abnormal behaviors of Internet of Things equipment, and the method comprises the steps: the Internet of Things equipment collects data, and carries out the data transmission with a cloud through an mqtt protocol; the cloud adopts RabbitMQ to receive the mqtt message, and stores the mqtt message in an asset set queue corresponding to the Internet of Things device; the cloud analysis module subscribes an asset set queue in an mqtt protocol mode, receives data collected by the Internet of Things device and calls the analysis sub-module toperform threat analysis, the cloud storage module judges whether threat data exists in a memory regularly, and if yes, the cloud storage module needs to store the threat data into an MONGO database. The terminal only collects data and sends the collected data to the queue component RabbitMQ, and the cloud reads the data from the RabbitMQ for analysis, so that direct terminal cloud interaction is avoided, and the coupling is reduced. Modularized design is adopted in exception analysis programs, calling is convenient, the portability is good, and the expansibility is good.

Description

technical field [0001] The invention relates to the technical field of network information security, in particular to a cloud identification method for abnormal behavior of Internet of Things devices. Background technique [0002] Traditional equipment security detection products generally run offline programs manually to detect various configurations and service operations, such as some security baseline detection tools, and most of them are aimed at traditional computers or mobile terminals. However, with the rapid development of science and technology today, the number of IoT devices has increased geometrically compared to the past. While IoT devices bring us smart life, they also bring new hidden dangers to information security. Since most IoT devices lack built-in security features, this makes them more vulnerable to malware and hackers; moreover, most of the built-in chips or systems of IoT devices are relatively lightweight and cannot be used to protect most IoT devi...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a cloud-based identification method for abnormal behavior of IoT devices, which is used to solve the problem that it is difficult to develop security analysis programs for IoT devices in the prior art

Images