基于包络延拓和本征波匹配的时变DoS攻击频谱检测

DoS攻击信号具有非平稳时变特性,湮没在色噪声背景的复杂网络环境中,对之难以有效检测.传统方法中采用基于非平稳时变信号处理的Hough变换单谱脉冲响应检测算法,由于二次型时频分布的边缘效应会引起较大包络衰减,检测性能不好.因此提出一种基于包络延拓和本征波匹配的时变DoS攻击信号频谱检测算法来对DoS攻击检测信号进行双曲调频分解,构建信号数学演化模型,得到信号包络和本征波特征提取结果.采用双线性Hough变换法分析频谱特征畸变,进行瞬时频率估计,得到信号的单谱脉冲响幅频响应,在包络时频特征空间优化搜索路径实现包络延拓,基于最小均方误差准则设计本征波匹配滤波器,控制DoS频谱偏移,实现信号频谱检测.仿真结果表明,本算法能在强色噪声背景干扰下提高检测性能,检测概率高于传统算法,且能准确估计参量信息,提高对DoS攻击信号的主动防御能力.

Spectrum Detection of Time-varying DoS Attack Signal Based on Envelope Extension and Intrinsic Wave Matching

DoS attacks signal has non-stationary and time-varying property.It is lost in the complex network environment with color noise background,and it is difficult to detect.Traditional methods use Hough transform impulse response method to detect the non-stationary signal.Due to the edge effect of frequency distribution,detection performance is not good.A new spectrum detection method of DoS attack signal was proposed based on envelope extension and intrinsic wave matching filtering.The DoS attack signal is processed with hyperbolic frequency modulated signal decomposition,and mathematical evolution model is constructed.Signal envelope intrinsic wave features are extracted.The bilinear Hough transform method is used to analyze the spectrum distortion,instantaneous frequency estimation is obtained,and single pulse response amplitude frequency response is calculated.In time frequency feature space,the envelope extension path search is optimized.Intrinsic wave matching filter is designed based on minimum mean square error criteria.DoS frequency shift is controlled,and the spectrum detection is obtained.Simulation results show that the algorithm can improve the detection performance,and the interference of strong colored noise can be suppressed.The detection probability is higher than traditional methods.It can accurately estimate the parameters,and the active defense ability of network security is improved.