Network security early warning system based on self-adaptive mimicry technology

Abstract

The invention provides a network security early warning system of a self-adaptive mimicry technology. The system comprises simulation substitute hosts, real hosts, a main server, a simulation server and a flow monitoring unit, a plurality of real hosts are connected with the main server to form an intranet, and the simulation substitute hosts are used for simulating the operation of the real hosts. The simulation server is used for simulating the operation of the main server, the flow monitoring unit and the plurality of simulation substitute hosts are respectively connected with the simulation server so as to form an external network for simulating the operation of an internal network, the external network is accessed to the Internet, and encrypted communication can be carried out betweenthe main server and the simulation server. The flow monitoring unit and the plurality of simulation substitute hosts are respectively connected with the simulation server so as to form an external network for simulating the operation of an intranet, the external network is accessed to the Internet, and attack behaviors are filtered through the external network, so that the security of the intranet can be greatly improved, and the intranet is prevented from being attacked.

Description

technical field [0001] The invention relates to the technical field of communication security, in particular to a network security early warning system of adaptive mimicry technology. Background technique [0002] At present, network security means that the hardware, software and data in the network system are protected from being damaged, changed, or leaked due to accidental or malicious reasons, the system runs continuously and reliably, and the network service is not interrupted. [0003] An advanced persistent threat is a new type of organized, targeted, and extremely long-lasting attack. With the exposure of Stuxnet, Duqu, Flame, and the Killdisk attack on Ukrainian power plants in 2015, it can be seen that APT attacks will pose a huge threat to the security of various industrial control networks and key information infrastructure. [0004] However, the existing information security construction mainly focuses on border protection, and the attack monitoring on the intr...

AI Technical Summary

Problems solved by technology

[0004] However, the existing information security construction mainly focuses on border protection, and the attack monitoring on the intranet is in a blank state

Images