Network security protection method and device based on artificial intelligence, and electronic equipment

Abstract

The invention provides a network security protection method and device based on artificial intelligence, electronic equipment and a computer readable storage medium. The method comprises the steps ofobtaining to-be-protected access traffic for a target network address; for a plurality of sessions included in the to-be-protected access traffic, extracting a data statistical feature of each session; extracting hidden layer features from the data statistical features of each session through a neural network model, so as to carry out normal or abnormal classification processing on each session based on the hidden layer features; identifying the session classified as abnormal in the to-be-protected access traffic as attack access traffic; and shielding the attack access traffic for the targetnetwork address based on the source address of the attack access traffic. Through adoption of the method and the device, the encrypted attack traffic and the unencrypted attack traffic can be identified and cleaned.

Description

technical field [0001] The present invention relates to artificial intelligence and network technology, in particular to an artificial intelligence-based network security protection method, device, electronic equipment and computer-readable storage medium. Background technique [0002] Artificial Intelligence (AI) is a theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results. [0003] The Hypertext Transfer Protocol (HTTP, Hypertext Transfer Protocol) in the related technology uses clear text to transmit information, which has the risk of being eavesdropped and tampered with. The HTTP (HTTPS, Hyper TextTransfer Protocol over SecureSocket Layer) based on the secure socket layer is developed based on HTTP. Using the secure socket layer for encrypted information interaction pr...

AI Technical Summary

Problems solved by technology

[0003] The Hypertext Transfer Protocol (HTTP, Hypertext Transfer Protocol) in the related technology uses clear text to transmit information, which has the risk of being eavesdropped and tampered with. The HTTP (HTTPS, Hyper TextTransfer Protocol over SecureSocket Layer) based on the secure socket layer is developed based on HTTP. Encrypted information interaction using the secure socket layer provides identity verification, information confidentiality and integrity verification functions. With the enhancement of user security requirements and some policy mandatory requirements, more and more networks The service actively or passively switches its own service from HTTP to HTTPS to bring higher security to data transmission, and at the same time, it also gives hackers an opportunity. The HTTPS protocol transmits encrypted messages on the network. Due to the huge resource consumption of processing HTTPS connections, the attack cost is relatively low, but the damage is relatively high

Images