Network intrusion protection system

Abstract

The invention discloses a network intrusion protection system, which comprises a network engine module for obtaining external data exchange through a multi-core hardware platform, carrying out behavior analysis, association analysis, protocol anomaly detection, flow anomaly detection, intelligent protocol identification and deep protocol analysis on the obtained data, and constructing a file feature library, a website reputation library and an attack feature library; a management module, used for carrying out user management, configuration management, strategy management, time management, logmanagement and system monitoring on the data and the user state analyzed by the network engine module, generating related management files and configuring related management information; and a security response module, used for starting a corresponding processing instruction after the network engine module detects network intrusion. Intrusion protection, data leakage protection, advanced threat protection, botnet discovery, virus protection and flow control of a computer network can be completed, potential safety hazards of all levels can be automatically coped with, and the deep attack defense capability can be provided for users.

Description

technical field [0001] The invention relates to the technical field of computer network security, in particular to a network intrusion prevention system. Background technique [0002] With the development of network and information technology, especially the widespread popularization and application of the Internet, the importance of information security is also increasing. In recent years, the security issues faced by network information systems have become more and more complex, and security threats are growing rapidly, especially new application-based threats, such as application-layer attacks hidden on basic protocols such as HTTP, web2.0 security issues , Trojan horse backdoor, spyware, botnet, DDoS attack, abuse of network resources, including P2P download, IM instant messaging, online games, video, etc., greatly troubled users, caused serious damage to the information network of the unit, and seriously affected information further development of. In the next few yea...

AI Technical Summary

Problems solved by technology

The continuous development of offense and defense, the continuous evolution of security threats, and the widespread use of new applications and technologies will also have a huge impact on the original security concept and model. The original security detection and protection methods can no longer completely solve the problems facing security issues

Images