基于多技术融合的智能高级攻击监测系统设计  

Design of Intelligent Advanced Attack Monitoring System Based on Multi-technology Fusion

作　　者：刘玉婷 杭菲璐 谢林江 LIU Yuting;HANG Feilu;XIE Linjiang(Information Center of Yunnan Power Grid Co.,Ltd.,Kunming 650217,China)

机构地区：[1]云南电网有限责任公司信息中心,云南昆明650217

出　　处：《现代信息科技》2025年第3期170-176,182,共8页Modern Information Technology

摘　　要：为应对新型电力系统和网络数字化设备发展中网络安全面临的挑战,文章提出一种基于多技术融合的智能高级攻击监测系统。系统采用分层设计,包含流量层、解析层和检测层,以此实现对数据的全面捕获与深度分析。在研究过程中,运用了深度包检测技术、智能化检测技术以及可编程对抗技术,构建了特征库模块、智能检测模块和插件检测模块,并借助机器学习算法增强智能检测能力。实验结果表明,该系统能够有效地监测已知和未知的攻击流量,为网络安全攻击监测提供了一种全面的解决方案。In order to address the challenges of network security in the development of new power systems and network digital equipment,this paper proposes an intelligent advanced attack monitoring system based on multi-technology fusion.The system adopts layered design,including traffic layer,parsing layer and detection layer,so as to realize the comprehensive capture and in-depth analysis of data.In the research process,the Deep Packet Inspection technology,intelligent detection technology and programmable countermeasure technology are used to construct the feature library module,intelligent detection module and plugin detection module,and the Machine Learning algorithm is used to enhance the intelligent detection ability.The experimental results show that the system can effectively monitor known and unknown attack traffic,and provides a comprehensive solution for network security attack monitoring.

关 键 词：网络安全 高级攻击监测 多技术融合 深度包检测 智能化检测 可编程对抗 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论] TP309.5[自动化与计算机技术—计算机科学与技术]