基于多视图的攻击分类体系  

Network attack classification architecture based on multi-view

作　　者：章丽娟[1] 王清贤[1] 

机构地区：[1]国家数字交换系统工程技术研究中心,郑州450002

出　　处：《计算机应用研究》2010年第1期255-258,共4页Application Research of Computers

摘　　要：针对攻击分类研究发展的局限性,提出用多视图的方法构建以attack view、defense view和third-partyview三个视图为主体结构的由四个层次组成的攻击分类体系。通过对攻击分类特性的合理性分析,提出将可接受性、完备性、互斥性、确定性和可用性作为分类评价的基本指标,采用三种不同的方法对分类结果进行评判,并分析比较了它们的优劣。在实例分析中用RDF对分类体系进行了描述,结果显示所提出的方法在攻击分类的综合评价和可视化方面合理有效。This paper analyzed the limitations of network attack classification research. Presented a classification system composed by four levels. The main structure contained attack view, defense view and third-party view. Proposed and compared three different methods to evaluate the results on the classification which took acceptability, completeness, exclusive, determinism and availability as the hasic indexes. Described RDF used in the examples of the classification system. The result shows that this method is sound and effective for evaluation and visualization of attack classification research.

关 键 词：网络攻击 分类 多视图 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]