Intelligent security monitoring and networking alarm method and system for large-scale network attack

Abstract

The invention discloses an intelligent security monitoring and networking alarm method and system for large-scale network attacks. The method comprises the steps of network attack detection, bypass blocking equipment, specific network flow blocking and networking behavior management. Wherein the network attack detection supports fine-grained network attack detection, and supports correlation analysis, bypass deployment, zero delay and zero fault risk with network assets; the system is connected to the switch in a bypass mode, service interruption is not needed during access, any delay and interruption cannot be brought to the network during operation, and the reliability reaches the carrier-class 99.99% requirement; the single-machine processing capability of the system can reach 10Gbps, and fine-grained detection and accurate blocking of network data messages are supported; the system supports identification of more than 30 protocols, detection of 13 file types, detection of more than 3000 malicious codes and self-defined detection rules.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a large-scale network attack-oriented intelligent security monitoring and networking alarm method and system. Background technique [0002] With the continuous development of computer technology, network security issues have become more and more concerned, and information networks and security systems have gradually become the basis and guarantee for the healthy development of informatization. There are generally unknown vulnerabilities in equipment and business systems, which makes network security facing more severe challenges and puts forward higher requirements for network security monitoring in the context of the civilianization of network weapons and the organization of network attacks. [0003] The security of network use has always been a concern of citizens. The traditional network security is to establish a set of security protection systems. The security prote...

AI Technical Summary

Problems solved by technology

[0003] The security when using the network has always been a concern for citizens. Traditional network security is to establish a security protection system. The security protection system is installed on a computer or a background server. When malicious network attacks occur, through security protection The system blocks, but when the computer is running, its security protection system cannot perform intelligent self-test and analysis, so that it cannot better stabilize the stability of the network, and when the security protection system is performing malicious network attacks When blocking, it will take up a lot of network resources, which will cause the problem of slow upload and download speed when citizens use the network. Therefore, an intelligent security monitoring and networking system for large-scale network attacks is proposed. Alarm method and system

Images