Internet of Things safety monitoring method and system based on double engines

Abstract

The invention discloses an Internet of Things safety monitoring method and system based on double engines, and the method comprises the steps: deploying a detection processing engine in an Internet ofThings sensing layer in advance, and deploying a collection analysis engine in a network layer of the Internet of Things; discovering and identifying terminal equipment of the Internet of Things through a detection processing engine, obtaining equipment information of the terminal equipment, and reporting equipment attributes and equipment state information to an acquisition analysis engine; andacquiring, by the acquisition and analysis engine, flow data of a network core switch, constructing a network behavior analysis model of the terminal equipment according to the flow data and equipmentinformation of the terminal equipment, monitoring abnormal network behaviors by using the network behavior analysis model, and performing alarm and / or blocking operation. Through linkage of the two types of engines, terminal equipment discovery and identification and risk disposal are realized, centralized management and control and behavior analysis are performed on the dispersedly isolated Internet of Things terminals, the comprehensiveness and accuracy of behavior analysis and monitoring are improved, and the disposal efficiency is ensured.

Description

technical field [0001] The invention relates to the technical field of Internet of Things security, in particular to a dual-engine based Internet of Things security monitoring method and system. Background technique [0002] In recent years, with the rapid development of the Internet of Things, big data and cloud computing technology, the era of the Internet of Everything has come, and the applications based on the Internet of Things have become more and more extensive in various fields, bringing revolutionary changes to today's social production and lifestyle. Compared with the traditional Internet, the structure of the Internet of Things is more complex. The perception layer has a wide variety of terminal devices, a large number, and a variety of interconnection protocols. More importantly, its extensibility is stronger, and the perception layer is far away from the core network layer and application layer. The above characteristics put forward higher requirements for the ...

AI Technical Summary

Problems solved by technology

[0005] In view of the above technical problems, the embodiment of the present invention provides a dual-engine-based IoT security monitoring method and system, which can solve the problem that the IoT in the prior art cannot centrally manage and control the scattered and isolated IoT terminals, and cannot promptly detect violations. Equipment to deal with technical issues in a timely manner

Images