an immune system

Abstract

The invention is applicable to the field of internet information safety and provides an immunological network system. The system comprises a transparent firewall, an intelligent inspection device and an emergency device, wherein the transparent firewall is used for analyzing and extracting the scan features and preventing external network scanning; the intelligent inspection device is used for monitoring the flow which enters the network, extracting the attach fingerprint features according to the abnormal flow and storing the attach fingerprint features into an immunological feature library; and the emergency device provides an emergency channel for the damaged internal network nodes detected by the intelligent inspection device and prompts the user to reduce the damaged nodes to the safety state before attack after the operation of the user is finished. The network flow is monitored and audited, the good state of the network is maintained, the unknown intrusion behavior is analyzed and memorized, the network immunity is improved, the damage range can be effectively controlled after intrusion, the unimpeded network service can be normally provided, the system has the self-restoring and reducing capacity, and the stable operation of the network is comprehensively maintained.

Description

technical field [0001] The invention belongs to the field of Internet information security, and in particular relates to an immune network system. Background technique [0002] Information security issues generally exist in various aspects such as social economy, military technology, national security, intellectual property rights, commercial secrets and even personal privacy. Network security is a key issue that has been studied in the field of computer network and its application. However, the traditional network security theory and technology have the following three insurmountable defects. Firstly, the method of centralized control seems powerless for the current distributed network environment; secondly, the network has isomorphism, which cannot prevent suspicious intruders and viruses from spreading rapidly and widely; Sexuality and passivity can no longer adapt to the harsh and changeable network environment. [0003] At present, looking at domestic and foreign rese...

AI Technical Summary

Problems solved by technology

[0007] The purpose of the present invention is to solve the problem of being unable to prevent the rapid spread of viruses and control the scope of damage in the prior art, and to provide a virus that can not only detect and identify known viruses and unknown viruses, but also effectively control the scope of virus damage, and has the ability of self-repair Immune network system, when important parts of the system are damaged or destroyed by viruses, the system can still complete tasks and repair damaged services in time

Images