Article Details

Abstract

In order to address the challenges of network security in the development of new power systems and network digital equipment, this paper proposes an intelligent advanced attack monitoring system based on multi-technology fusion. The system adopts layered design, including traffic layer, parsing layer and detection layer, so as to realize the comprehensive capture and in-depth analysis of data. In the research process, the Deep Packet Inspection technology, intelligent detection technology and programmable countermeasure technology are used to construct the feature library module, intelligent detection module and plug-in detection module, and the Machine Learning algorithm is used to enhance the intelligent detection ability. The experimental results show that the system can effectively monitor known and unknown attack traffic, and provides a comprehensive solution for network security attack monitoring.

Keywords

network security; advanced attack monitoring; multi-technology fusion; Deep Packet Inspection; intelligent detection; programmable countermeasure

References

1. [1] Xu Jia, Zhou Danping, Gu Haidong Overview of APT attacks and their detection techniques [J]. Confidential Science and Technology, 2014 (1): 34-40
2. [2] Zhang Zhechang Research on Vulnerability Mining Framework for Deep Packet Inspection System [D]. Wuhan: Huazhong University of Science and Technology, 2023
3. [3] Zhang Liang, Qu Gang, Li Huixing, etc Research and Application of Key Technologies for Network Security Situation Awareness Platform of Smart Grid Power Monitoring System [J]. Journal of Shanghai Jiao Tong University, 2021, 55 (S2): 103-109
4. [4] Wu Panpan, Yu Jiawen, Han Bingqing A Brief Discussion on Web Security Logic Vulnerability Mining Based on HTTP Packet [J]. Computer Age, 202 (9): 24-28
5. [5] Zhou Yingjie, Jiao Chengbo, Chen Huinan, etc Detection of DoS&DDoS attacks and identification of abnormal flows based on traffic behavior characteristics [J]. Computer Applications, 2013, 33 (10): 2838-2841+2845
6. [6] Lin Song Research and Implementation of Network Traffic Classification and Anomaly Detection Technology Based on Machine Learning [D]. Nanjing: Nanjing University of Posts and Telecommunications, 2023
7. [7] He Nengfang Design and Implementation of Python Program Vulnerability Detection Plugin Based on Graph Neural Network [D]. Guiyang: Guizhou University, 2021
8. [8] Ren Xiaofeng, Dong Zhanqiu Research and Implementation of Methods to Improve Snort Rule Matching Speed [J]. Computer Applications, 2003 (4): 59-61
9. [9] Hu Rui, Xu Qinbao, Wang Changda A machine learning based DDoS intrusion detection and defense method in SDN [J]. Computer and Digital Engineering, 2023, 51 (7): 1590-1596+1610
10. Liang Songlin, Lin Wei, Wang Jue, etc Research on Network Malicious Traffic Detection for Post Penetration Attack Behavior [J]. Computer Engineering, 2024, 50 (5): 128-138

About the authors

Liu Yuting (born on July 10, 1987), female, Han ethnicity, from Zhaotong, Yunnan, engineer, master's student, research direction: information security; Hang Feilu (1984.01-), male, Han ethnicity, from Zhaotong, Yunnan, is a senior engineer and a master's student. His research interests include information security and network security countermeasures; Xie Linjiang (August 1985-), male, Han ethnicity, from Qujing, Yunnan, is a senior engineer with a bachelor's degree. His research interests include information security and network security countermeasures.