Abstract:

“Endogenous security” gives the information network the ability of self-learning and self-growth,and it’s the important part of building a trusted intelligent communication network.“Endogenous security” was combined with malicious behavior detection,and an endogenous detection framework of malicious behavior with endogenous security capabilities was proposed.Passive defense was turned into active interception.In addition,the five key components in the endogenous detection framework were also modeled and analyzed,and explained the self-learning and self-growth malicious behavior detection mechanism.Finally,the deployment method of the prototype system was introduced.Preliminary test results show the proposed framework is feasible and effective.

Key words: information network, endogenous security, malicious behavior detection, security architecture