Network security intrusion detection system based on block chain technology

Abstract

The invention discloses a network security intrusion detection system based on a block chain technology, which belongs to the technical field of block chains and comprises a user registration module, an information processing module, an information uplink module, a block chain storage module, a data acquisition module, a block updating module, an intrusion detection module, an intrusion tracing module and an intrusion blocking module. According to the invention, the node identity information, the host system log and the network data packet of the node host are encrypted and stored by using the characteristics that the data in the block chain is traceable and cannot be tampered, so that an intrusion source can be traced, and targeted network intrusion blocking can be carried out; in addition, distributed collaborative intrusion detection is performed based on the multi-node hosts, the intrusion detection efficiency is improved and the missing report rate is reduced by utilizing different feature libraries of different node hosts, and the intrusion detection accuracy is improved by identifying data in an unknown state through similarity clustering analysis. And the false alarm rate of intrusion detection is reduced.

Description

technical field [0001] The invention relates to the field of blockchain technology, and in particular to a network security intrusion detection system based on the blockchain technology. Background technique [0002] A network intrusion detection system (NIDS) refers to a combination of software and hardware that detects behaviors that endanger the security of computer systems, such as collecting vulnerability information, denying access, and obtaining system control beyond the legal scope. With the continuous development of computer technology and the widespread use of Internet of Things technology, a large number of physical devices are connected to the network, making the entire network vulnerable to various security threats. In order to effectively alleviate this rising trend and protect network security, intrusion detection systems have become an essential tool for many security organizations; however, the current high-utilization intrusion network systems are basically...

AI Technical Summary

Problems solved by technology

[0002] Network intrusion detection system (NIDS) refers to the combination of software and hardware that detects behaviors that endanger computer system security, such as collecting vulnerability information, denying access, and obtaining system control rights beyond the legal scope; With the continuous development of computer technology and the widespread use of Internet of Things technology, a large number of physical devices are connected to the network, making the entire network vulnerable to various security threats. In recent years, network attacks have emerged both in scale and in number. In order to effectively alleviate this upward trend and protect network security, the intrusion detection system has become an essential tool for many security organizations; however, the intrusion network systems with relatively high usage rates are basically based on rules The above system, although it can also guarantee network security well, there are certain limitations; for example, CN113254925A discloses a network intrusion detection system based on PCA and SVM, although this invention improves the intrusion detection efficiency, it is difficult to A new intrusion is detected, and the source of the intrusion cannot be traced, so that targeted network intrusion blocking cannot be carried out in time to protect network security; blockchain technology is jointly maintained by multiple parties, using cryptography to ensure transmission and access security, and can realize The technical system of consistent data storage, non-tampering, and non-repudiation uses blockchain technology to store network data, making the stored data traceable and non-tamperable, thus ensuring the reliability and credibility of the stored data; therefore, how to combine the blockchain technology Block chain technology to realize the identification and traceability of network intrusion behavior, and timely targeted intrusion blocking has become the current research focus; therefore, we propose a network security intrusion detection system based on block chain technology

Images