| 基于活跃熵的DoS攻击检测模型 |
| |
| 引用本文： | 刘衍珩,付枫,朱建启,孙鑫.基于活跃熵的DoS攻击检测模型[J].吉林大学学报(工学版),2011(4):1059-1064. |
| |
| 作者姓名： | 刘衍珩 付枫 朱建启 孙鑫 |
| |
| 作者单位： | 吉林大学计算机科学与技术学院;吉林大学符号计算与知识工程教育部重点实验室; |
| |
| 基金项目： | 国家自然科学基金项目(60973136,61073164); 国家发改委下一代互联网业务试商用及设备产业化专项项目(CNGI-09-01-11); 国家科技部国际合作与交流专项项目(2008DFA12140); 吉林省青年基金项目(201101033); 吉林大学科学前沿与交叉学科创新项目(450060445169) |
| |
| 摘 要： | 针对日益严重的拒绝服务(DoS)网络攻击行为,提出了一种基于活跃熵的DoS攻击检测模型。该模型通过活跃通信理论将信息熵与网络流会话相关性结合起来,通过分析网络流量活跃熵值的变化实现对DoS攻击行为的检测。实验结果表明:正常网络流量下活跃熵值基本稳定,在发生DoS攻击时网络流量的活跃熵值波动明显;该模型与静态熵检测模型相比,检测结果更准确,同时能够更有效地检测未知的DoS攻击行为。
|
| 关 键 词： | 计算机系统结构 DoS攻击检测 活跃熵 活跃通信 信息熵 |
DoS detection model base on alive entropy |
| |
| LIU Yan-heng,FU Feng,ZHU Jian-qi,SUN Xin.DoS detection model base on alive entropy[J].Journal of Jilin University:Eng and Technol Ed,2011(4):1059-1064. |
| |
| Authors: | LIU Yan-heng FU Feng ZHU Jian-qi SUN Xin |
| |
| Affiliation: | LIU Yan-heng1,2,FU Feng1,ZHU Jian-qi1,SUN Xin1,2(1.College of Computer Science and Technology,Jilin University,Changchun 130012,China,2.Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education,China) |
| |
| Abstract: | An alive entropy model is proposed for detecting increasingly serious Denial of Service(DoS) attacks.The model is based on the theory of active communication that combines the information entropy and related sessions of network flow.The model detects DoS attacks through the analysis of the variation of the network flow's alive entropy.Experiment result show that the alive entropy is stable under normal network flow,and when attack occurs it fluctuates obviously.Compared with other methods based on the stati... |
| |
| Keywords: | computer systems organization DoS attack detection alive entropy alive communication information entropy |
| 本文献已被 CNKI 等数据库收录！ |
