CN105208040B - 一种网络攻击检测方法及装置 - Google Patents
一种网络攻击检测方法及装置 Download PDFInfo
- Publication number
- CN105208040B CN105208040B CN201510659070.2A CN201510659070A CN105208040B CN 105208040 B CN105208040 B CN 105208040B CN 201510659070 A CN201510659070 A CN 201510659070A CN 105208040 B CN105208040 B CN 105208040B
- Authority
- CN
- China
- Prior art keywords
- user
- preset
- network
- historical user
- historical
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
Claims (18)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510659070.2A CN105208040B (zh) | 2015-10-12 | 2015-10-12 | 一种网络攻击检测方法及装置 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510659070.2A CN105208040B (zh) | 2015-10-12 | 2015-10-12 | 一种网络攻击检测方法及装置 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN105208040A CN105208040A (zh) | 2015-12-30 |
CN105208040B true CN105208040B (zh) | 2019-03-26 |
Family
ID=54955473
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201510659070.2A Active CN105208040B (zh) | 2015-10-12 | 2015-10-12 | 一种网络攻击检测方法及装置 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN105208040B (zh) |
Families Citing this family (18)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107784314A (zh) * | 2016-08-26 | 2018-03-09 | 北京协同创新智能电网技术有限公司 | 一种多变量报警***的正常异常数据划分方法及*** |
CN108122116A (zh) * | 2016-11-29 | 2018-06-05 | 腾讯科技(深圳)有限公司 | 一种产品推广渠道的监管方法及*** |
CN106506567A (zh) * | 2017-01-12 | 2017-03-15 | 成都信息工程大学 | 一种基于行为评判的隐蔽式网络攻击主动发现方法 |
CN108449307B (zh) * | 2017-02-16 | 2020-12-29 | 上海行邑信息科技有限公司 | 一种用于识别风险设备的方法 |
CN106657410B (zh) * | 2017-02-28 | 2018-04-03 | 国家电网公司 | 基于用户访问序列的异常行为检测方法 |
CN107426217B (zh) * | 2017-07-27 | 2019-10-18 | 郑州云海信息技术有限公司 | 一种检测***入侵的方法及装置 |
CN107517203B (zh) * | 2017-08-08 | 2020-07-14 | 奇安信科技集团股份有限公司 | 一种用户行为基线建立方法及装置 |
CN107528859B (zh) * | 2017-09-29 | 2020-07-10 | 北京神州绿盟信息安全科技股份有限公司 | 一种DDoS攻击的防御方法及设备 |
CN108400995B (zh) * | 2018-06-07 | 2020-12-22 | 北京广成同泰科技有限公司 | 一种基于流量模式比对的网络攻击识别方法及识别*** |
CN108965267B (zh) * | 2018-06-28 | 2021-04-02 | 北京车和家信息技术有限公司 | 网络攻击处理方法、装置及车辆 |
CN108965055B (zh) * | 2018-07-17 | 2021-07-13 | 成都信息工程大学 | 一种基于历史时间取点法的网络流量异常检测方法 |
CN109218321A (zh) * | 2018-09-25 | 2019-01-15 | 北京明朝万达科技股份有限公司 | 一种网络入侵检测方法及*** |
CN109302403B (zh) * | 2018-10-26 | 2021-03-23 | 锦图计算技术(深圳)有限公司 | 网络入侵检测方法、***、设备及计算机可读存储介质 |
CN110505202B (zh) * | 2019-07-12 | 2020-10-27 | 中国科学院信息工程研究所 | 一种攻击组织发现方法及*** |
CN110738272B (zh) * | 2019-10-23 | 2020-11-03 | 智洋创新科技股份有限公司 | 一种输电线路通道可视化机械类连续告警样本的标注方法 |
CN110855648B (zh) * | 2019-11-04 | 2021-11-19 | 腾讯科技(深圳)有限公司 | 一种网络攻击的预警控制方法及装置 |
CN111818097B (zh) * | 2020-09-01 | 2020-12-22 | 北京安帝科技有限公司 | 基于行为的流量监测方法及装置 |
CN115865493A (zh) * | 2022-11-30 | 2023-03-28 | 网易(杭州)网络有限公司 | 基于流量的分布式拒绝服务攻击检测方法、装置及介质 |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1588880A (zh) * | 2004-10-15 | 2005-03-02 | 华中科技大学 | 基于聚类与关联的网络安全报警*** |
CN101090334A (zh) * | 2007-05-23 | 2007-12-19 | 西安交大捷普网络科技有限公司 | 一种解决入侵检测***中海量报警的方法 |
US8639797B1 (en) * | 2007-08-03 | 2014-01-28 | Xangati, Inc. | Network monitoring of behavior probability density |
CN104113519A (zh) * | 2013-04-16 | 2014-10-22 | 阿里巴巴集团控股有限公司 | 网络攻击检测方法及其装置 |
CN104967629A (zh) * | 2015-07-16 | 2015-10-07 | 网宿科技股份有限公司 | 网络攻击检测方法及装置 |
-
2015
- 2015-10-12 CN CN201510659070.2A patent/CN105208040B/zh active Active
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1588880A (zh) * | 2004-10-15 | 2005-03-02 | 华中科技大学 | 基于聚类与关联的网络安全报警*** |
CN101090334A (zh) * | 2007-05-23 | 2007-12-19 | 西安交大捷普网络科技有限公司 | 一种解决入侵检测***中海量报警的方法 |
US8639797B1 (en) * | 2007-08-03 | 2014-01-28 | Xangati, Inc. | Network monitoring of behavior probability density |
CN104113519A (zh) * | 2013-04-16 | 2014-10-22 | 阿里巴巴集团控股有限公司 | 网络攻击检测方法及其装置 |
CN104967629A (zh) * | 2015-07-16 | 2015-10-07 | 网宿科技股份有限公司 | 网络攻击检测方法及装置 |
Non-Patent Citations (2)
Title |
---|
入侵检测***中基于量子理论的克隆选择算法研究;李岩;《中国优秀硕士学位论文全文数据库 信息科技辑》;20110630(第6期);第16页第7段至第17页第1段、图2-6 |
基于多告警源关联分析的僵尸检测方法研究;唐亮;《中国优秀硕士学位论文全文数据库 信息科技辑》;20120731(第7期);第16页1-3段、第36页第1段 |
Also Published As
Publication number | Publication date |
---|---|
CN105208040A (zh) | 2015-12-30 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN105208040B (zh) | 一种网络攻击检测方法及装置 | |
CN105376255A (zh) | 一种基于K-means聚类的Android平台入侵检测方法 | |
CN103581186B (zh) | 一种网络安全态势感知方法及*** | |
Ranjan et al. | A new clustering approach for anomaly intrusion detection | |
CN109033973B (zh) | 监控预警方法、装置及电子设备 | |
US8245301B2 (en) | Network intrusion detection visualization | |
CN110245056A (zh) | 运维告警信息处理方法及装置 | |
CN105071985B (zh) | 一种服务器网络行为描述方法 | |
Kuang et al. | An anomaly intrusion detection method using the CSI-KNN algorithm | |
CN109344617A (zh) | 一种物联网资产安全画像方法与*** | |
CN106991072A (zh) | 在线自学习事件检测模型更新方法及装置 | |
CN107370766A (zh) | 一种网络流量异常检测方法及*** | |
EP3640935B1 (en) | Notification information output method, server and monitoring system | |
CN109218321A (zh) | 一种网络入侵检测方法及*** | |
Mkuzangwe et al. | Ensemble of classifiers based network intrusion detection system performance bound | |
CN113961438B (zh) | 一种基于多粒度多层级的历史行为异常用户检测***、方法、设备及存储介质 | |
CN106095967A (zh) | 一种基于搜索引擎的重复报警识别方法和*** | |
CN105635085A (zh) | 基于动态健康度模型的安全大数据分析***及方法 | |
CN105117322A (zh) | 一种基于多源报警日志安全事件特征分析的去冗余方法 | |
Jabbar et al. | Intrusion detection system using bayesian network and feature subset selection | |
Khamassi et al. | Drift detection and monitoring in non-stationary environments | |
Neethu | Adaptive intrusion detection using machine learning | |
CN109919095A (zh) | 危化品仓库中码垛的监控方法及电子设备 | |
CN109951420A (zh) | 一种基于熵和动态线性关系的多级流量异常检测方法 | |
CN108508297A (zh) | 一种基于突变系数和svm的故障电弧检测方法 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant | ||
TR01 | Transfer of patent right |
Effective date of registration: 20200325 Address after: 100089 Beijing city Haidian District Road No. 4 North wa Yitai three storey building Co-patentee after: NSFOCUS TECHNOLOGIES Inc. Patentee after: NSFOCUS INFORMATION TECHNOLOGY Co.,Ltd. Co-patentee after: Shenzhou Lvmeng Chengdu Technology Co.,Ltd. Address before: 100089 Beijing city Haidian District Road No. 4 North wa Yitai three storey building Co-patentee before: NSFOCUS TECHNOLOGIES Inc. Patentee before: NSFOCUS INFORMATION TECHNOLOGY Co.,Ltd. |
|
TR01 | Transfer of patent right | ||
CP01 | Change in the name or title of a patent holder |
Address after: 100089 Beijing city Haidian District Road No. 4 North wa Yitai three storey building Co-patentee after: NSFOCUS TECHNOLOGIES Inc. Patentee after: NSFOCUS Technologies Group Co.,Ltd. Co-patentee after: Shenzhou Lvmeng Chengdu Technology Co.,Ltd. Address before: 100089 Beijing city Haidian District Road No. 4 North wa Yitai three storey building Co-patentee before: NSFOCUS TECHNOLOGIES Inc. Patentee before: NSFOCUS INFORMATION TECHNOLOGY Co.,Ltd. Co-patentee before: Shenzhou Lvmeng Chengdu Technology Co.,Ltd. |
|
CP01 | Change in the name or title of a patent holder |