Distributed hacker tracking system in controllable computer network

Abstract

The present invention is one distributed hacker tracking system in controllable computer network based on network invasion detection and data fingerprint technology. Inside one enclosed and controllable network system, network monitors are set in all shared network sections to send the invasion alarm information to the managing device. In case that some monitor finds invasion, the managing device will check corresponding record to back track the message path and to determine the network section the hacker is in or to determine the initial source. The system has excellent expandability and real-time property and is suitable for large hetero network.

Description

Technical field [0001] The present invention relates to distributed processing of computer information network security, in particular to a hacker tracking system of a controllable computer network. Background technique [0002] Computers and the Internet have become one of the most important information infrastructure in a country. Protecting the security of these facilities from hostile countries, computer hackers, and other computer criminals is a necessary condition for protecting the sovereignty, integrity and information security of the country, and ensuring the normal operation of government, finance, commerce, technology and other industries and departments. . [0003] If you can obtain the real address of the hacker, record the relevant evidence, and bring it to law, you can effectively deter cyber crimes and computer crimes, and maintain the security of networks and computer systems. Although hacker tracing has important security significanc...

AI Technical Summary

Problems solved by technology

However, it still needs to save the sequence number information of all TCP connections, and it can only be compared centrally, which is difficult in large-scale network applications; at the same time, if the network transmission time fluctuates greatly, the error generated by this method will also follow. increases; for connections with shorter durations, the resulting error is also larger

[0071] However, most of the existing intrusion detection systems focus on the discovery and prevention of attacks. Although most network-based attacks can be detected, it is difficult to trace the real source of hackers.

Images