| 基于攻击意图的复合攻击预测方法研究 |
| |
| 引用本文： | 张松红,王亚弟,韩继红.基于攻击意图的复合攻击预测方法研究[J].计算机工程与设计,2007,28(21):5100-5102. |
| |
| 作者姓名： | 张松红 王亚弟 韩继红 |
| |
| 作者单位： | 解放军信息工程大学,电子技术学院,河南,郑州,450004 |
| |
| 摘 要： | 入侵检测系统仅能检测到攻击,但不能预测攻击者下一步的攻击.分析了基于攻击行为预测方法的不足,提出了一种基于攻击意图的复合攻击预测方法.该方法使用抽象的攻击意图表示复合攻击,采用扩展的有向图表达攻击意图间的逻辑关系,建立了攻击匹配的攻击意图框架,在复合攻击预测算法中引入了攻击检测度和攻击匹配度两个概念.最后,通过实验验证了该方法的有效性.
|
| 关 键 词： | 攻击 复合攻击 攻击意图 攻击预测 攻击意图逻辑关系图 攻击意图 复合攻击 预测方法 研究 intention attack based algorithm 有效性 实验验证 匹配度 测度 预测算法 框架 逻辑关系 表达 有向图 扩展 图表示 使用 |
| 文章编号： | 1000-7024（2007）21-5100-03 |
| 修稿时间： | 2006-12-05 |
Forecast algorithm for multi-step attack based on attack intention |
| |
| ZHANG Song-hong,WANG Ya-di,HAN Ji-hong.Forecast algorithm for multi-step attack based on attack intention[J].Computer Engineering and Design,2007,28(21):5100-5102. |
| |
| Authors: | ZHANG Song-hong WANG Ya-di HAN Ji-hong |
| |
| Affiliation: | College of Electronic Technology, PLA Information Engineering University, Zhengzhou 450004, China |
| |
| Abstract: | Attack can be only detected,but the attacker's next attack can't be forecasted by intrusion detection system.The default of the approach to forecasting attack based on attack behavior is analyzed,a forecast algorithm for multi-step attack based on attack intention is addressed.Multi-step attack is modeled by attack intention and the logic relationship between attack intention is expressed by extended directed graph.The attack intention frame of attack for attack to match is addressed.The degree of detected attack and matched attack is defined.At the end,the validity of the algorithm is proved by the experimental results. |
| |
| Keywords: | attack multi-step attack attack intention forecast attack logic graph of attack intention |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
