Server intrusion detection alarm design method

Abstract

The invention relates to a server intrusion detection and alarm system and a detection and alarm method thereof, which are used for realizing intrusion alarm of a server, assisting a server administrator in perfecting a server security policy and improving information security performance. The server intrusion detection alarm system provided by the invention comprises a detection processing modulelocated in a client server and used for collecting operation behavior information of the server; the logic processing module is located in a central server of the system and is used for processing the operation behavior information sent by each client server, sending specific intrusion information to a server administrator through a processing result of the central server and directly sending feedback information to the client server to enable the client server to defend immediately; a server administrator obtains detailed server operation behavior information by logging in a mobile phone application program or a website of the system so as to make an effective defense strategy.

Description

technical field [0001] The invention belongs to the field of Internet security and relates to a server intrusion detection and alarm design method. Background technique [0002] On the Internet, there are many servers that provide computing services. These servers will accumulate a large amount of data information as the number of users of the service increases, making the information security of the server extremely important. In the existing technology, generally by establishing a firewall to detect and filter passing data, the effect of defending against attacks and intercepting intrusions can be effectively achieved. But in this way, it cannot be completely immune to the endless invasion and attack methods. [0003] The main problem now is that when the server is invaded and attacked, the server administrator cannot get timely and accurate alarm information to improve the security defense measures of the server. For example, a new type of loophole appears in the existi...

AI Technical Summary

Problems solved by technology

But in this way, it cannot be completely immune to the endless invasion and attack methods

[0003] The main problem now is that when the server is invaded and attacked, the server administrator cannot get timely and accurate alarm information to improve the security defense measures of the server. Steal server data, a large amount of data has been stolen by the time the server administrator discovered the vulnerability

Images