An Intrusion Detection System Based on Cloud Computing

Abstract

The invention discloses an intrusion detection system based on cloud computing, and relates to the technical field of network security. The invention includes a user interaction interface, an overall management unit, a data preprocessing unit, an intrusion tolerance unit and a cloud server; the user interaction interface is connected to the overall management unit through the cloud service directory module; the overall management unit is respectively connected to the data preprocessing through the data transmission module The unit, the intrusion tolerance unit and the cloud server perform data interaction; the intrusion tolerance unit performs data interaction with the cloud server through the data transmission module. Based on cloud computing technology, the present invention utilizes a data preprocessing unit to filter network data, and simultaneously introduces a cloud server based on a K-means clustering algorithm model to analyze the detection data, thereby effectively improving network intrusion detection efficiency and having relatively high practicability. Strong, with high market application value.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to an intrusion detection system based on cloud computing. Background technique [0002] In recent years, as network-based services have gradually extended to various fields of society and the amount of confidential information in the network has increased significantly, network security technology has become more and more important. How to effectively detect and prevent network intrusion To ensure the security of network data has also begun to attract the attention and attention of people from all walks of life. At present, one of the main methods for the network intrusion detection system is to deploy a firewall. The firewall has the advantages of simplicity, practicality and high transparency. It can meet certain security requirements without modifying the original network system, but the firewall is only a passive defense. The firewall can only provide two kinds of ser...

AI Technical Summary

Problems solved by technology

At present, one of the main methods for the network intrusion detection system is to deploy a firewall. The firewall has the advantages of simplicity, practicality and high transparency. It can meet certain security requirements without modifying the original network system, but the firewall is only a passive defense. The firewall can only provide two kinds of services: deny and pass, and there are certain security problems and program deficiencies; the other way is to install and deploy an intrusion detection system on the host, which depends on the computing resources and operating system of the host Although it improves the security protection capability of the host to a certain extent, it is far from meeting the complex application requirements of users.

[0003] With the continuous increase of network scale and network application traffic, especially in today's big data era, the network traffic is even greater, and the traditional network intrusion detection system structure has exposed more and more limitations and defects, such as heavy workload , slow response speed, insufficient processing capacity, etc., which increase the burden on the host. In addition, the deployment of intrusion detection systems is more complicated, and it is more difficult to update and maintain. Professional personnel are often required for maintenance, which increases the cost of website operation and maintenance.

Images