Active defense method and device for data flow attacks

Abstract

The invention provides an active defense method and device for data flow attacks. The method includes: correspondingly storing the obtained data stream and the coding characteristic value of the network protocol code corresponding to the data stream into a preset data stream list; determining a flow curve of the data flow in a preset coordinate plane according to the flow of the data flow in eachlist area of the data flow list and the coding characteristic value of the protocol code corresponding to the network protocol; determining the similarity between the preset characteristic and the curve characteristic of the extracted flow curve in the list area. When it is determined that the computer equipment corresponding to the curve characteristics has the data flow attack behavior accordingto the similarity, communication between the computer equipment and the target network can be actively cut off before the computer equipment starts the data flow attack behavior, and active defense of data flow attacks is achieved.

Description

technical field [0001] The invention relates to the technical field of big data data flow detection, in particular to an active defense method and device for data flow attacks. Background technique [0002] With the development of big data and communication networks, computer equipment is facing various cyber attacks. Cyber ​​attacks (Cyber ​​Attacks, CA) refer to offensive actions against information systems, network systems or infrastructure systems of computer equipment. Network attacks will expose computer equipment to an unsafe environment, which is quite detrimental to the normal operation of computer equipment and important data information stored in computer equipment. As a type of attack in network attacks, data flow attack will greatly affect the network speed of the network where the computer equipment is located. Generally speaking, defenses against data flow attacks will be activated when there are abnormal and irregular delays in the network speed. However, e...

AI Technical Summary

Problems solved by technology

Network attacks will expose computer equipment to an unsafe environment, which is quite detrimental to the normal operation of computer equipment and important data information stored in computer equipment

As a type of attack in network attacks, data flow attacks will greatly affect the network speed of the network where the computer equipment is located

Generally speaking, defenses against data flow attacks will be activated when there are abnormalities and irregular delays in the network speed. However, even if this method can defend against data flow attacks, it still cannot recover the losses caused by the previous network speed delays.

Images