Intrusion detection system and method combining user behavior portrait and equipment resource monitoring

Abstract

The invention provides an intrusion detection system and method combining a user behavior portrait and equipment resource monitoring, and the system comprises a user behavior portrait module which is used for judging whether the operation of a user accords with the historical behavior characteristics of the user or not; the equipment resource utilization monitoring module is used for judging whether the system resource has an abnormal use condition or not; and the system security detection module is used for judging whether the work in the system is normal or not and whether a system administrator needs to be alarmed or not according to the abnormal activity information given by the user behavior portrait module and / or the equipment resource utilization monitoring module. According to the intrusion detection system combining the user behavior portrait and the equipment resource monitoring, the functions of the intrusion detection system are further improved, the error probability is reduced, and the safety of the system is ensured.

Description

technical field [0001] The invention relates to the field of network security, and relates to an intrusion detection system and method combining user behavior portraits and device resource monitoring. Background technique [0002] The computer structure tends to be simple and easy to carry, technological innovation promotes the rapid development of the network, network security has gradually become a new discipline, and network security has penetrated into all aspects of life. It is a combination of computer science, network technology, communication technology, and information security technology. Large-scale and highly complex development and transformation of the network, through the monitoring, investigation and application of the network, the probability of network intrusion is reduced, and the risk of property information leakage is reduced. At present, the main ways of network intrusion include hacker intrusion, system backdoor intrusion, computer virus intrusion, den...

AI Technical Summary

Problems solved by technology

At present, the main ways of network intrusion include hacker intrusion, system backdoor intrusion, computer virus intrusion, denial of service attack, internal leak, logic bomb, information loss and password cracking, etc. Traditional network protection is based on firewall technology , the rest of the network technology can no longer meet the needs of daily life

Images