基于云计算的网络病毒入侵检测系统研究

Research on Network Virus Intrusion Detection System Based on Cloud Computing

由于现今黑客的攻击手法不断进步,无论是防护工具还是检测工具,若未即时进行侦测规则或其他相关更新,将会在很短的时间内失去效用。本研究将于云端环境构建一套判断网络黑客攻击的专家系统,并利用云端运算高速计算的能力来加速判断是否遭受黑客攻击并及时予以警告,以避免企业或组织受到黑客攻击。当受到任何攻击时,本系统会依据专家所提供的知识规则以及推论引擎的规则判断,判断其为何种网络攻击,并向管理者发出警告与提供防护建议。

Due to the continuous progress of the hacker＇s attack techniques, the existing tools are not enough to be used. Regardless of the protection tools or detection tools, if the detection rules or other related updates are not carried out immediately, they will lose effectiveness in a very short time. This research will build a set of expert system to judge the hacker attacks in the cloud environment, and use cloud computing high speed computing ability to accelerate whether it is attacked by hackers or not, and warn them in time, so as to avoid the hacker attacks on enterprises or organizations. When subjected to any aggressive behavior, the system will determine what kinds of cyber attacks are based on the knowledge rules provided by experts and the rules of inference engine, and provide warnings and protection suggestions to managers.