Method for network security detection in complex network

Abstract

The invention discloses a method for network security detection in a complex network. The method comprises the following steps: positioning a network node in time and space; establishing a security attack detection database of node security abnormities in a network and corresponding solutions; based on a KDD algorithm, mining and analyzing network traffic and event density in historical access data of each node, and establishing a dynamic Poisson distribution model and setting a security threshold and a threat threshold of the network traffic and the event density; detecting access behavior of the nodes, and comparing monitoring values of the network traffic and the event density of the nodes with the security threshold and the threat threshold; if the monitoring values are smaller than the safety threshold, it being indicated that the behavior of the nodes is safe; if the monitoring values are greater than the safety threshold and smaller than the threat threshold, dynamically tracking working behavior of the nodes; and if the monitoring values are greater than the threat threshold, stopping access work of the nodes, and calling the security attack detection database to address security threats of the nodes.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for network security detection in complex networks. Background technique [0002] With the increasing accessibility of information and data, there is growing concern about data security and privacy. Ensuring network security and providing a good network environment for civil society are necessary conditions for the development of the Internet. With the gradual development of the Internet, there are always large-scale and diverse network security attacks lurking in the network. Security threats in the network have the characteristics of strong concealment, reproducibility, and difficulty in retrospect. Existing network security detection methods must deal with a large amount of multi-dimensional and unstructured data. Data, many threat detection methods have troubles in many aspects such as detection results and efficiency in the process of processing abnormal ...

AI Technical Summary

Problems solved by technology

The unpredictability of network security attacks and its own concealment make attacks more rampant and destructive in the entire network.

For example, it is even more difficult to establish and implement a DDos attack detection model. There are many ways to monitor and defend against DDos attacks, but it is difficult to achieve real-time dynamic security monitoring

Images