Network cooperative defense system and method based on community structure

Abstract

The invention relates to a network cooperative defense system and method based on a community structure, wherein the system divides the whole network into a plurality of autonomous communities, and each autonomous community comprises a user host, a cooperative control center and a community internal security system; wherein the community internal security system comprises an intrusion detection module which is used for intrusion detection and notifying a cooperative control center if abnormal information exists; an information honeypot and honeynet module which is used for responding to a command sent by the cooperative control center and storing and continuously monitoring abnormal information so as to obtain virus characteristics; a firewall module which is used for access control and identity authentication in the user host and the router; an intrusion protection module which is used for assisting the intrusion detection module to clear data packets containing viruses; a collaborative defense strategy library module which is used for storing node defense strategies or security defense strategies; a cooperative control center which is used for generating an optimal defense strategy according to a detection analysis result. The systems and methods provided by the present disclosure inhibit latent virus propagation.

Description

technical field [0001] The present disclosure relates to the technical field of computer network information security, in particular to a community structure-based network collaborative defense system and method. Background technique [0002] As a widely used network, the public Internet requires the security and controllability of key services and the protection of the legitimate rights and interests of users. However, illegal and deliberate attacks such as network information theft and key node destruction pose a great threat to public Internet security, including distributed denial of service attacks, virus attacks, advanced persistent threats, etc. [0003] The traditional defense system mainly adopts the method of static defense to strengthen the system protection, so as to protect the security of the network. Related technologies include firewall technology, encryption and decryption technology, data authentication and access control technology, etc. For the normal ac...

AI Technical Summary

Problems solved by technology

Due to the latent characteristics, it is usually difficult for static defense to detect the latent characteristics of the virus, and it is impossible to completely remove the virus. Therefore, the traditional defense mode has inherent limitations in dealing with such external attacks

Images