Design and implementation of scene visualization system based on dual engine structure
Mingwei Liu, Jian Luo, Jing Zhu, Yi Kang · 2023
Intrusion detection is an advanced security technology that goes beyond traditional measures like access control, passwords, authentication, auditing, and firewalls. It safeguards against internal and external attacks, as well as misoperation. To establish a user's normal behavior, a set of behavior profiles must be created and maintained, describing the user's typical system usage. This paper presents a visualization algorithm for network intrusion scenes, employing a dual-engine structure that integrates network-based and host-based intrusion detection systems. The algorithm offers combined detection, reporting, and response capabilities. Simulation results demonstrate significant improvements in false alarm rates compared to traditional methods. The network engine implementation combines protocol analysis and pattern matching, narrowing down target matches and enhancing detection speed. The approach effectively meets the efficiency and accuracy requirements of intrusion detection systems in cloud computing environments.