Intrusion detection method and detection equipment

Abstract

The invention provides an intrusion detection method and detection equipment, and the method comprises the steps: building a detection model which comprises a capture layer, a network protocol layer, a detection layer and a response layer; the capture layer is used for capturing a data packet; the network protocol layer is used for performing protocol analysis on the captured data packet to obtain an analysis result; the detection layer is used for determining whether the captured data packet is an attack event or not according to the analysis result; the response layer is used for performing attack response when the detection layer judges that the captured data packet is an attack event; and performing intrusion detection on the network data by using the detection model. Through the method, whether the data packet contains the attack event or not can be judged through protocol analysis of the data packet.

Description

technical field [0001] The present disclosure relates to the field of information security, and in particular, to an intrusion detection method and detection device. Background technique [0002] Intrusion detection: (intrusion detection) by collecting information from several key points in a computer network or computer system and analyzing it to find out whether there are behaviors that violate security policies and signs of being attacked in the network or system. [0003] With the rapid development of computer networks, network communication has penetrated into all fields of social economy, culture and science; it plays a pivotal role in the progress and development of human society, and it is affecting and changing the way people work, study and live. . In addition, the development and application level of the Internet has also become an indicator to measure a country's political, economic, military and technological strength; the development of network technology is a...

AI Technical Summary

Problems solved by technology

[0005] However, while the network brings great convenience to people's study, life and work, it also brings various security problems

Cyber ​​hackers can easily take away your confidential files, steal your bank deposits, destroy your business accounts, publish your private letters, tamper with, interfere with and destroy your database, and even directly destroy your disk or computer, making you The network is paralyzed or crashed

Images