Software-defined Internet of Things self-learning security defense method and system

Abstract

The invention discloses a software-defined Internet of Things self-learning security defense method and system. The method comprises the following steps: (1) sniffing and obain a data packet which issent by a software-defined Internet of Things node and is contained between a medium access control layer and a network layer; (2) performing network security feature extraction and encoding; (3) clustering the codes of the network security feature values; (4) comparing each category with elements in a known security network security feature code set and elements in a known risk network security feature value code set, automatically performing judging and updating; and (5) identifying and updating unknown network security feature codes by network security expert group members. The system comprises a sniffing module, an analysis module, a detection defense module and a knowledge base; according to the invention, the Internet of Things node configuration management work of an Internet of Things administrator is effectively reduced, the software-defined Internet of Things security defense system is automatically updated, and the self-adaption to the dynamic change of the software-definedInternet of Things network environment is realized.

Description

technical field [0001] The invention belongs to the technical field of Internet of Things security, and more specifically relates to a software-defined Internet of Things self-learning security defense method and system. Background technique [0002] At present, the Internet of Things has been widely used in many fields such as smart home, Internet of Vehicles, industrial Internet, and smart cities. However, in the face of complex application requirements, the Internet of Things has many network management problems, such as the maintenance of Internet of Things nodes, node software system updates, and network topology changes after adding new nodes. There are also many problems in cyberspace security. For example, IoT nodes have become the main source equipment for malicious attackers to launch distributed denial of service attacks. [0003] "Software-defined Internet of Things" is based on the "software-defined network" architecture, which embodies the idea of ​​separation...

AI Technical Summary

Problems solved by technology

In this way, the workload of IoT node configuration management is high, and the burden of Internet of Things administrators to defend against malicious network behavior is heavy, and it is difficult to deploy a security defense system that requires high computing resources, and the deployed security defense system is often out of date state of technical deficiencies

Images