Server abnormal behavior sensing system based on bypass technology

• Main Authors: LIU JIAXIANG, HUANG LONGFEI, ZHAO KUNYANG, SHI XIAOCHUAN, LIU QI, CHEN YULIANG, ZHANG JING
• Format: Patent
• Language: Chinese; English
• Published: 12.06.2020
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention discloses a server abnormal behavior perception system based on a bypass technology. The system comprises an information acquisition module, an information feature extraction module, a network node, a network host, a warning module, an information storage module, a client, a feature database and an analysis module, wherein the feature database comprises a normal mode library and an abnormal mode library. Through the design of the information acquisition module, the information feature extraction module, the network node, the network host, the warning module, the information storage module, the client, the feature database and the analysis module, the problem that server exception cannot be monitored and perceived in the prior art is solved, and the server safety is guaranteed. 一种基于旁路技术的服务器异常行为感知系统，包括信息采集模块、信息特征提取模块、网络节点、网络主机、警示模块、信息存储模块、客户端、特征数据库和分析模块；特征数据库包括正常模式库和异常模式库。本发明通过信息采集模块、信息特征提取模块、网络节点、网络主机、警示模块、信息存储模块、客户端、特征数据库和分析模块的设计解决了现有技术中服务器发生异常无法被监测感知的问题，保障了服务器安全。