The invention provides a real-time
network security monitoring and protection method and
system based on
deep learning, and the method comprises the steps: extracting the local features of network traffic through a
convolutional neural network, analyzing the
time sequence features of abnormal network traffic through a long-
short term memory network, and recognizing a
network attack type; calculating the intensity of the
network attack based on the traffic rate, the duration and the number of source IPs of the
network attack, calculating a risk
score based on the local features of the network traffic, and carrying out weighted calculation on the risk
score and the intensity of the network
attack to obtain a comprehensive
score; and in response to different types of network attacks and in combination with the comprehensive scores of the different types of network attacks, executing different network
attack protection measures, adjusting the protection level in real time according to the strength and risk scores of the network attacks, recording network
attack information and protection measures, and generating a security log. The network flow can be analyzed in real time, the network attack type can be identified, corresponding protection measures can be taken, the accuracy of network attack detection is improved, and the risk is reduced.