摘要
为应对新型电力系统和网络数字化设备发展中网络安全面临的挑战,文章提出一种基于多技术融合的智能高级攻击监测系统。系统采用分层设计,包含流量层、解析层和检测层,以此实现对数据的全面捕获与深度分析。在研究过程中,运用了深度包检测技术、智能化检测技术以及可编程对抗技术,构建了特征库模块、智能检测模块和插件检测模块,并借助机器学习算法增强智能检测能力。实验结果表明,该系统能够有效地监测已知和未知的攻击流量,为网络安全攻击监测提供了一种全面的解决方案。
In order to address the challenges of network security in the development of new power systems and network digital equipment,this paper proposes an intelligent advanced attack monitoring system based on multi-technology fusion.The system adopts layered design,including traffic layer,parsing layer and detection layer,so as to realize the comprehensive capture and in-depth analysis of data.In the research process,the Deep Packet Inspection technology,intelligent detection technology and programmable countermeasure technology are used to construct the feature library module,intelligent detection module and plugin detection module,and the Machine Learning algorithm is used to enhance the intelligent detection ability.The experimental results show that the system can effectively monitor known and unknown attack traffic,and provides a comprehensive solution for network security attack monitoring.
作者
刘玉婷
杭菲璐
谢林江
LIU Yuting;HANG Feilu;XIE Linjiang(Information Center of Yunnan Power Grid Co.,Ltd.,Kunming 650217,China)
出处
《现代信息科技》
2025年第3期170-176,182,共8页
Modern Information Technology
关键词
网络安全
高级攻击监测
多技术融合
深度包检测
智能化检测
可编程对抗
network security
advanced attack monitoring
multi-technology fusion
Deep Packet Inspection
intelligent detection
programmable countermeasure
