Design And Implementation Of Server Security Monitoring System For Multi-source Data

With the rapid development of the Internet,the number and scale of Web servers are increasing.At the same time,however,the security risks faced by Web servers are also increasing.Faced with such severe network security issues,the traditional server security monitoring system cannot meet the current server’s requirements for security and stability due to its single function and untimely alarm response processing.In the current era of information and communication technology,intrusion detection technologies are used to implement network infrastructure and secure server resources,among other things.Most intrusion detection methods cannot handle the massive amounts of data available today and are unable to detect some advanced malicious threats.Therefore,designing an efficient intrusion detection model and embedding it in the server security monitoring system is also a topic worth studying.Based on the above research ideas,the existing server security monitoring systems at home and abroad were first studied.After analysing the strengths and weaknesses of each system,the parts that can be optimised are found.Then the techniques related to deep learning models such as intrusion detection technology,website defacement detection and self-encoder were studied in depth.A server security monitoring system for multi-source data was designed and implemented around the requirements analysis.The core functions of the system are intrusion detection,firewall configuration management and website defacement detection.In the intrusion detection module,a machine learning approach based on Spark MLlib is designed and implemented to fuse a deep learning model based on convolutional self-encoders as the algorithmic model for intrusion detection.The firewall configuration management module manages the server’s firewall and provides user-defined filtering of traffic.The website defacement detection module focuses on monitoring web pages on websites and detecting common web attacks.In summary,a server security monitoring system for multi-source data is designed and implemented,which mainly includes six functional modules: visualization,firewall configuration management,intrusion detection,website defacement detection,log monitoring and alarm notification.After testing and experimenting,the system can run well in the current mainstream servers and meet the basic needs of users.