一种网络攻击流量生成器的设计与实现  

Design and Realization of a Network Attack Generator

作　　者：王永杰[1] 鲜明[1] 陈志杰[1] 王国玉[1] 

机构地区：[1]国防科学技术大学电子科学与工程学院,长沙410073

出　　处：《计算机科学》2007年第2期64-67,90,共5页Computer Science

基　　金：国家自然科学基金项目(60372039)

摘　　要：网络攻击流量的生成技术对于研究评估网络攻击行为的攻击效果以及网络安全防护设施的性能等具有重要意义。本文研究了一种基于模型的网络攻击流量生成器的结构组成与设计方法。给出了网络攻击流量生成器的总体结构设计。研究了描述网络攻击行为所需要的特征信息及其分类,提出了以有限状态自动机来对网络攻击行为进行建模的方法,给出了网络攻击模型在数据库中的存储表结构。该网络攻击流量生成器可以生成与真实网络攻击行为特征一致,可以控制网络攻击流量。最后以SYNFlood攻击为例对其应用情况进行了分析。The network attack generation technology has great significance to the study of evaluating effect of network attacks or testing performance of network security establishments such as IDS, firewall etc.. A network attack generator based on attack model was studied. The framework and design method of the network attack generator were provided. The characteristic information needed describing network attacks were studied carefully. A network attack modeling method based on finite state machine was brought forward. The database table structure for the network attack model was also provided. The network attack generator could generate network attack traffics which had the same characteristic with real network attack. The traffics generated by the network attack generator could control and modify easily. Finally, the SYN Flood attack was analyzed as an example by the network attack generator.

关 键 词：网络攻击 攻击建模 攻击流量生成 有限状态自动机 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]