论文部分内容阅读
随着IT及互联网技术不断的演进,安全威胁也在不断的发生演变,新的威胁APT攻击、0day攻击、水坑攻击等正在不断涌现,单纯依靠传统的基于特征库的静态检测防御技术已无法完全确保业务系统的安全性,通过研究一种基于业务系统网络流量学习的智能安全流量建模技术和系统,可较快的建立符合业务系统自身特点的“Secure By Default”安全模型,完善对新安全威胁的检测和防护能力。
With the continuous evolution of IT and Internet technologies, security threats are constantly evolving. New threats such as APT attacks, 0day attacks and puddles attacks are constantly emerging. Simply relying on the traditional signature-based static detection and defense technology has become impossible Completely ensure the security of the business system. By studying a smart traffic modeling technology and system based on traffic learning of business system network, the “Secure By Default” security model can be set up faster according to the characteristics of the business system Detection and protection of new security threats.