Computer network intelligent monitoring system

Abstract

The invention discloses an intelligent monitoring system for a computer network, and the system comprises an abnormal flow monitoring module which is used for achieving the metering of the current network flow of a computer, and achieving the recognition of the abnormal flow; an abnormal behavior recognition module which is started when the abnormal traffic monitoring module recognizes the abnormal traffic, records the current operation behavior in a screen recording mode, and recognizes the abnormal behavior of the computer by comparing the theoretical network traffic of the current operation behavior with the current abnormal traffic; an abnormal behavior interception module which is started when the abnormal behavior recognition module recognizes the abnormal behavior of the computer, and interception of the abnormal behavior is achieved; and an access equipment inspection module which is used for regularly crawling the information of the current access equipment through the web crawler module, rejecting the access equipment in non-authority, and storing the ID of the access equipment in an access equipment blacklist. According to the invention, the false alarm rate of the intrusion behavior can be obviously reduced, and the existence of network security vulnerabilities is avoided as much as possible.

Description

technical field [0001] The invention relates to the field of network safety supervision, in particular to a computer network intelligent monitoring system. Background technique [0002] With the rapid development of computer technology and the Internet, and the frequent occurrence of network information security incidents in recent years, network information security issues have gradually penetrated into various industries and become the focus of attention. In order to prevent the occurrence of security incidents in advance and avoid losses, network security intrusion detection has become a key link to understand network security performance. At present, the existing computer network security intrusion detection can only intercept specific or continuous intrusion behaviors, which has a high rate of false positives and large security holes. Contents of the invention [0003] In order to solve the above technical problems, the present invention provides a computer network i...

AI Technical Summary

Problems solved by technology

At present, the existing computer network security intrusion detection can only intercept specific or continuous intrusion behaviors, has a high false alarm rate, and has a large security loophole

Images