Fog computing intrusion detection feature sharing system based on block chain technology

Abstract

The invention provides a fog computing intrusion detection feature sharing system based on a block chain technology, which can ensure the security of content of an intrusion detection feature libraryand is beneficial to improving the intrusion detection accuracy. The system comprises an identity authentication module used for carrying out identity authentication on a node to be added into an alliance chain, and if the authentication is passed, allowing the node to be added into the alliance chain; a feature sharing module used for broadcasting any node A added into the alliance chain to a network for sharing if the node A shares the updated intrusion detection feature library; and a feature verification module used for carrying out correctness verification on the intrusion detection feature library broadcasted in the network by other nodes in the network, and if the verification is passed, storing the intrusion detection feature library in a block chain system in an uplink manner. Theinvention relates to the technical field of information security.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a fog computing intrusion detection feature sharing system based on block chain technology. Background technique [0002] In recent years, with the further development of the Internet of Things and big data technology, more and more end-user devices (ie: nodes, such as mobile phones, notebooks, etc.) However, as an emerging computing paradigm, there are still many security issues in fog computing. [0003] In order to identify threats in the network, intrusion detection systems have been widely used in computer networks, and there are misuse detection and anomaly detection according to the detection methods; among them, [0004] Misuse detection first needs to analyze the attack situation, then write the corresponding detection rules and feature models, and detect by pattern matching the existing features with the monitored data, because it can only be done accordin...

AI Technical Summary

Problems solved by technology

[0007] The technical problem to be solved by the present invention is to provide a fog computing intrusion detection feature sharing system based on blockchain technology. By introducing blockchain technology, the problem of data sharing between nodes without a trusted third party is solved, and it can Ensure that the content of the intrusion detection signature database is not tampered with, reduce the risk of the intrusion detection signature database being attacked, and use the power of the alliance to make the intrusion detection signature database cover as many intrusion detection characteristics as possible, which helps to improve detection accuracy and reduce errors. Reporting rate, false negative rate

Images