Intrusion detection independent analysis method and system in cloud calculation environment

Abstract

The invention relates to an intrusion detection independent analysis method in a cloud calculation environment. An intrusion detector is trained through an improved BP neural network; the intrusion detector detects preprocessed network data packages with abnormal network traffic in real time; the detected abnormal data is recognized by the intrusion detector, so that network intrusion behaviors of known types are recognized; and characteristics of network intrusion behaviors that cannot be recognized in type are extracted to be used as training samples for independent learning so as to provide sources for recognition of new types of network intrusion behaviors. The invention also relates to an intrusion detection system. The system comprises a data acquisition module, a data preprocessing module, an intrusion detector, a resource dispatching module, a response and warning module, a database and an error tolerance module. The system can perform detection and recognition on the network intrusion behaviors. According to the intrusion detection method and system, a new way for independent analysis and detection of network intrusion in the cloud calculation environment is created, the detection rate is high and the expansibility is good.

Description

technical field [0001] The invention relates to the technical field of network intrusion detection. The invention also relates to an autonomous analysis intrusion detection system in a cloud computing environment, and also relates to an autonomous analysis intrusion detection method in a cloud computing environment. Background technique [0002] Computer network information system is the most important information exchange platform in today's society. The rapid development of network technology brings efficiency and convenience to people, while network intrusions are becoming more and more frequent, which leads to a surge in network security incidents. At the same time, with the advent of the era of big data and cloud computing, network users have grown rapidly, network security issues have become increasingly serious, and attack methods have been updated. A single passive defense method based on firewalls can no longer guarantee system security. [0003] Intrusion Detection...

AI Technical Summary

Problems solved by technology

However, due to the unpredictability of network intrusion in cloud computing, the existing intrusion detection methods are greatly limited.

Images