4 results about "Distributed intrusion detection" patented technology

The invention discloses a network security linkage response system based on distributed intrusion detection, which belongs to the technical field of network security, aims to improve the comprehensiveness of network threat detection and the timeliness of response, and comprises a distributed lightweight probe, an edge preprocessing and initial judgment module, a central depth analysis module, an intelligent linkage response module and a unified management visualization module. The distributed lightweight probe module collects network security data of each network node; the edge preprocessing and initial judgment module processes the network security data and reports the network security data after initial abnormal detection; the central deep analysis module fuses and associates the reported preprocessed data, and obtains a threat analysis result in combination with AI model analysis, external threat intelligence comparison and attack chain reduction; the intelligent linkage response module matches a preset strategy execution scheme based on the threat analysis result and feeds back an effect; and the unified management visualization module is responsible for configuration management, result display and alarm. According to the invention, accurate identification and rapid linkage response of network threats are realized, and the network security is effectively guaranteed.

The application belongs to the technical field of control systems, and particularly relates to a comprehensive renewable energy system based on distributed intelligent network security and a control architecture thereof, and aims to solve the problems of poor security and control limitations of the existing comprehensive renewable energy system, and the inability to meet the requirements of safe and reliable adaptive control and the like. The application comprises: a distributed adaptive access control module which distributes control tasks on each node in the network, acquires data on each node, and dynamically adjusts the control access strategy; a distributed intrusion detection and response module which distributes intrusion monitoring sensors on each node in the network, acquires network traffic data, mines abnormal behaviors and security threats, and generates a corresponding response strategy; and a control strategy conflict monitoring module for automatically discovering and solving conflicts. The application improves the efficiency, accuracy and scalability of network security control, reduces the risk of single-point failure, and reduces the work burden of network security management personnel.

This invention discloses a distributed intrusion detection method and system based on flexible, secure, and trusted federated learning, belonging to the field of network data security and sharing. The method includes: dividing nodes into training nodes and aggregation nodes; training nodes collecting network traffic, training a local network traffic classification model, and sending it to an edge network device; the edge network device detecting the uploaded local model and updating the list of trusted and malicious nodes; aggregation nodes aggregating qualified local models and returning the generated global model to the edge device; the edge device receiving the global model, verifying it, and broadcasting it; all training nodes receiving and using the latest global model to obtain the final intrusion detection model, and using the final intrusion detection model to detect intrusions. This invention effectively improves the system's security and robustness while ensuring data privacy and the trustworthiness of sharing.