Intrusion detection system based on Internet of Things flow and detection method thereof

Abstract

The invention discloses an intrusion detection system based on Internet of Things flow. The intrusion detection system comprises a basic data acquisition module, an Internet of Things protocol identification module, a data flow anomaly detection module and a visual analysis module. The invention further discloses an intrusion detection method based on the Internet of Things flow, which comprises the following steps: acquiring initial data of the Internet of Things data flow, determining a protocol type of the acquired Internet of Things data flow, carrying out anomaly detection on a deep packet of the Internet of Things data flow, and carrying out anomaly detection on a deep flow of the Internet of Things data flow; and judging whether the Internet of Things data flow is abnormal or not according to the detection result of the deep packet and the detection result of the deep flow The method goes deep into the process from flow collection to detection of the Internet of Things intrusiondetection system, improves the intrusion detection system under the Internet of Things, improves the intrusion detection efficiency, reminds safety personnel to engage in an event response plan, andprovides a powerful guarantee for the safety protection of the Internet of Things.

Description

technical field [0001] The invention belongs to the technical field of Internet of Things security, and specifically refers to an intrusion detection system based on Internet of Things traffic and a detection method thereof. Background technique [0002] In view of the dynamics, complexity, network and device heterogeneity of the Internet of Things, the Internet of Things has exposed more and more security issues, and most of the intrusions against the Internet of Things are infiltrated through the network. In order to apply In the new scene of the Internet of Things, new Internet of Things communication protocols continue to appear, but there is currently no intrusion detection system specifically for the data traffic of the Internet of Things protocol. In order to ensure the safe operation of IoT devices and the safe storage of data, it is urgent to study the security of data packet detection in IoT protocols. Contents of the invention [0003] The purpose of the presen...

AI Technical Summary

Problems solved by technology

[0002] In view of the dynamics, complexity, network and device heterogeneity of the Internet of Things, the Internet of Things has exposed more and more security issues, and most of the intrusions against the Internet of Things are infiltrated through the network. In order to apply In the new scene of the Internet of Things, new Internet of Things communication protocols continue to appear, but there is currently no intrusion detection system specifically for the data traffic of the Internet of Things protocol

Images