Botnet defense method, device and equipment for multi-level full-period Internet of Things equipment

Abstract

The invention provides a multilevel full-period botnet defense method, device and equipment for Internet of Things equipment. The method comprises the following steps: acquiring flow data of the Internet of Things equipment; performing threat monitoring on the Internet of Things equipment according to the flow data of the Internet of Things equipment to determine the security state of the Internet of Things equipment, wherein the security state comprises a security state or a stage in a botnet life cycle; when it is determined that the security state of the Internet of Things equipment is in one stage of a botnet life cycle, determining a target defense strategy matched with the stage; and performing threat blocking processing on the Internet of Things equipment according to the target defense strategy. According to the method, the botnet defense effect of the Internet of Things equipment can be optimized.

Description

technical field [0001] The present application relates to the field of information security, and in particular to a multi-level full-cycle Internet of Things device botnet defense method, device and equipment. Background technique [0002] A botnet refers to a network composed of a controller (which can be called a Botmaster) who spreads bots to control a large number of hosts for malicious purposes, and through a one-to-many command and control channel. [0003] Due to the large number of IoT devices, it is basically impossible to rely on security personnel to manually perform security inspections and protection, and their own computing and storage resources are relatively small, so it is impossible to install resource-intensive security software on the devices to ensure security, resulting in Botnets are a constant threat to the security of IoT devices. [0004] How to implement botnet defense against IoT devices has become an urgent technical problem to be solved. Cont...

AI Technical Summary

Problems solved by technology

[0003] Due to the large number of IoT devices, it is basically impossible to rely on security personnel to manually perform security inspections and protection, and their own computing and storage resources are relatively small, so it is impossible to install resource-intensive security software on the devices to ensure security, resulting in Botnets continue to threaten the security of IoT devices

Images