计算机工程2011,Vol.37Issue(5):172-174,178,4.
针对复合攻击的网络攻击预测算法
Network Attack Forecast Algorithm for Multi-step Attack
陈灿 1阎保平2
作者信息
- 1. 中国科学院计算机网络信息中心,北京,100190
- 2. 中国科学院研究生院,北京,100039
- 折叠
摘要
Abstract
The main form of network attack is multi-step attack. The current security equipments can only detect but not forecast. For this issue,this paper presents an approach based on attack utility to recognize the attacker's finally intention and forecast the next possible attack. It describes a multi-attack by the attack intent, and establishes the multi-attack logic diagram based on the attack intention. During the procedure of the attack forecast, attack utility is used to represent the attackers benefit for each attack step. The attack utility is an important reference for the multi-step attack forecast. Experimental results prove the validity of the algorithm.关键词
攻击预测/复合攻击/攻击意图/攻击效用Key words
attack forecast/ multi-step attack/ attack intention/ attack utility分类
信息技术与安全科学引用本文复制引用
陈灿,阎保平..针对复合攻击的网络攻击预测算法[J].计算机工程,2011,37(5):172-174,178,4.