基于行为的内网安全威胁检测系统在电力企业的应用  

Based Behavior of the Network Security Threat Detection System Applied in the Electric Enterprises

作　　者：周祥峰 

机构地区：[1]广东电网公司中山供电局,广东中山528400

出　　处：《计算机安全》2013年第3期80-83,共4页Network & Computer Security

摘　　要：介绍了一种基于行为的内网安全威胁检测系统在电力企业的应用,该成果能够检测第2层第7层数据流量,检测内网安全威胁,解决了传统IDS、IPS对于应用层难以监控,难以监控危险源、病毒源的难题。以某电力企业为例,阐述了其技术特点,部署方案,以及应用效果和推广前景。This article describes ＆ threat detection system based on the behavior of internal network security in the application of elee power enterprises, the outcomes can detect layer 2 to layer 7 d＆t＆ traffic detection within the network security threats, to solve traditional IDS this paper, ＆ PS application layer is difficult monitoring, it is difficult to monitor the problem of dangerous source, virus source power enterprise on its technical characteristics, deployment scenarios, and apply effects and promotion prospects.

关 键 词：基于行为 内网安全 威胁检测 

分 类 号：TP274[自动化与计算机技术—检测技术与自动化装置]