A method and system for dynamic intrusion detection based on nfv

Abstract

The invention relates to a dynamic intrusion detection method and system based on NFV. The method includes: constructing a plurality of virtual detection node groups, each virtual detection node group includes a plurality of virtual detection nodes, each virtual detection node stores a corresponding detection feature group and has the same node detection capability threshold; When the detection data exceeds the detection capability threshold of the node, the SDN flow replication technology is used to copy the data to be detected and distribute it to each virtual detection node group in parallel; according to the node of each virtual detection node in each virtual detection node group The detection capability threshold and the real-time detection capability value of the node distribute the data to be detected to each virtual detection node; each virtual detection node performs intrusion detection on the data to be detected assigned to itself at the same time. The invention can improve the flexibility of the intrusion detection network, reduce maintenance and procurement costs, and improve the integration of services.

Description

Technical field [0001] The present invention relates to the field of network security, and more particularly, to a method and dynamic intrusion detection system based on NFV (Network FunctionsVirtualization, virtual network function) of. Background technique [0002] Information systems security is a very complex issue, namely how complex information systems, information systems security issues there is more complicated. Similarly, information security is a difficult concept to quantify, we can take the information system's "Performance" and "security" as a comparison. For this type of network throughput performance problems, system operation speed, database storage, query metrics, the user can choose according to their own consideration of the actual business needs, budget and other conditions. Improve system performance, although the user can not touch or perceived, but it can actually see. Therefore, to improve information security systems product performance and stability is ...

AI Technical Summary

Problems solved by technology

[0004] The technical problem to be solved by the present invention is to provide a dynamic intrusion detection method and system based on NFV for the above-mentioned defects of the prior art, which utilizes NFV network technology, distributed computing architecture, SDN (SoftwareDefined Network, software defined network ) Network orchestration technology, on the premise of maintaining superior intrusion detection performance, solves the problems of traditional detection equipment hardware specificity, non-sharing of resources, poor business integration, and inflexible detection resource scheduling, improving the flexibility of intrusion detection networks and reducing maintenance and procurement costs, and improve business integration

Images