摘要
对于攻击者而言端口扫描是几乎是所有攻击行为的前奏,做好端口扫描检测是加强网络安全最重要的方法。论文在介绍几种端口检测工具的检测原理基础上,阐述了分布式的端口扫描检测方法、基于蜜罐技术的端口扫描检测法、基于Dempster-Shafer证据理论的端口扫描检测方法的基本原理及结合模拟退火算法、竞争学习技术、神经网络技术等一系列的检测方法。
For an attacker the port scanning is almost a prelude to all attacks. The port scan detection is one of the most important methods to strengthen the network safety. This paper introduces the detection principle of several port detection tools and follows four detection methods--expounds the distributed detection of port scanning method, Honeypot based port scanning detection method, Dempster Shafer evidence theory port scanning detection method and the method combined with simulated annealing algorithm, competitive learning technology, and neural network technology method.
基金
四川省科技支撑项目"面向网络可信服务的应用及终端安全理论与关键技术研究"(编号:2014GZ0017)资助
关键词
互联网
攻击
安全检测
internet
attack
security detection
