Network security event detection system and method based on grid computing

Abstract

The invention relates to a network security event detection system and method based on grid computing, and the system comprises a data collection module which is used for carrying out the real-time collection of a client, and obtaining the operation data, task data and user data generated by the client; a resource allocation module which is used for allocating user access permission according to the user data and executing computing resource allocation corresponding to the corresponding permission according to the task data and the operation data; and a grid detection module which is used forcalling the corresponding distributed computing resources to execute detection. The system has the beneficial effects that fine-grained high parallel computing is realized, and gridding parallel computing of a large-scale data set is supported; the expansibility and the computing resource balance of the parallel computing network and the nodes are realized; a full-life-cycle security baseline table model and a map-match mapping and matching detection process are adopted to realize fine-grained security event detection of the whole network.

Description

technical field [0001] The invention relates to the field of computer security detection, in particular to a network security event detection system and method based on grid computing. Background technique [0002] The existing detection of network security events mainly includes: 1. Install the detection on the single node in the network in the form of components to detect network security events on the single node; 2. Parallel intrusion detection in the form of single node The protected network segment is used to detect security events on the entire network segment; third, in the form of a distributed detection network, each intrusion detection is distributed and paralleled in each protected network segment of a single network to detect security events on the entire single network. security incidents. No matter in which form the detection system is connected to the network, it is required to have security and integrity. [0003] Existing intrusion methods include: deceiv...

AI Technical Summary

Problems solved by technology

[0006] (2) Communication security issues

For large-scale computing problems, if there are no fault tolerance and automatic repair measures, any failure in the middle, such as: a grid node is powered off or stops working, will make the previous calculations go to waste

Images