【摘要】 以大规模网络环境下安全事件的研究为依托,研究了一种面向大规模网络的预警定位与快速隔离控制技术及其实现方法和技术路线。通过分析安全事件的特征,建立分布式网络安全事件预警模型,通过监控安全事件活动,形成警戒灾区,研究扩散蔓延趋势预测模型,对警戒灾区进行快速定位,安全隔离。在该技术基础上实现了一套原型系统,实验结果表明,该系统在百兆流量下入侵预警漏报率小于5%,误报率小于7%,响应时间满足要求。更多还原

【Abstract】 Based on the research on security events in large-scale network environment,technology and realizable method of early-alert,orientation and rapid isolation control for large-scale networks are studied.By analysing the characteristics of security events,a early-alert model of distributed network security events is built.By monitoring the activities of security events,guard disaster areas is formed.Research on forecast model of trend of overspreading,in order to be rapidly orientated and safely isolated.A prototype has been imple-mented and used to protect distributed network system.The early-alert false negative is less than 5% and its false positive is less than 7% in the speed of 100 M.更多还原