摘要
针对目前网络安全防护技术的缺陷,提出一种基于异常分析的网络自保护机制.为提高对网络攻击的检测能力和防护能力,提出一种基于多元异常分析的网络攻击检测算法.该算法根据网络流测量指标的异常偏差值对其进行分类,对不同种类的网络流分配不同的路由调度优先级,可明显削弱网络攻击对正常网络通信流的影响.实验结果表明,该自保护机制能显著提高网络系统应对分布式拒绝服务攻击的防护能力.
A network self-protection mechanism based on abnormality analysis is presented aiming at deficiencies of current network security protection technologies. To improve the ability of detection and protection against network attacks, a network attack detection algorithm based on the multivariate abnormality analysis is proposed. The algorithm uses a metric of abnormal distance to classify the network flow into different types and prioritize the routing of the different network flow packets. In this way, the normal traffic flows can suffer the least impact from network attacks. Experiments show that our mechanism can significantly improve the network system＇ s protection ability against distributed denial of service attacks.
出处
《北京邮电大学学报》
EI
CAS
CSCD
北大核心
2011年第3期122-126,共5页
Journal of Beijing University of Posts and Telecommunications
基金
国家高技术研究发展计划项目(2006AA12A106)
天津市科技支撑计划重点项目(07ZCKFGX01700)
中国民航科技基金项目(RKXZY0814)
中央高校基本科研业务费专项资金项目(ZXH2009A006
ZXH2010D009)
关键词
自保护
网络攻击
异常分析
机制
self-protection
network attack
abnormality analysis
mechanism
