Intelligent network attack detecting method and device

Abstract

The embodiment of the invention provides an intelligent network attack detecting method and device. The intelligent network attack detecting method comprises the steps of converting a feature set of a preset system into a function and importing the function into a mathematic model of an established learning system; obtaining the base of the feature set and a network protection feature set through a sparse algorithm; establishing a recurrent neural network, extending and reasoning base functions in the network protection feature set for early warning new varietal network attack data packets; establishing a convolutional neural network to judge whether a to-be-detected data packet is harmful data; and adjusting the combination and the number of the base functions based on the judgment result made by the preset system for the to-be-detected data packet and the judgment result made by the learning system for the to-be-detected data packet so as to evolve the mathematic model of the learning system. As the new varietal network attack data packets can be early warned through self-learning and self-adaptive abilities, the network attack detecting way has extension automation and intelligence.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an intelligent network attack detection method and device. Background technique [0002] With the continuous development of computer network technology, the security problems of computer network systems are becoming more and more serious, and new attack methods appearing constantly make network security problems more serious. In the field of computer security technology, the traditional network protection equipment IPS (Intrusion Prevention System, Intrusion Prevention System) is based on regular expressions to describe the data characteristics of malicious connections. Lag, and do not have the self-learning ability, unable to warn and detect some variants of unknown network attacks. Therefore, how to realize an intelligent and automatic network attack detection method needs to be solved urgently. Contents of the invention [0003] In view of this, the purpose of...

AI Technical Summary

Problems solved by technology

In the field of computer security technology, the traditional network protection equipment IPS (Intrusion Prevention System, Intrusion Prevention System) is based on regular expressions to describe the data characteristics of malicious connections. Lag, and does not have the self-learning ability, unable to warn and detect some variants of unknown network attacks

Images