基于概率推理的入侵意图识别研究  

Study on Intrusion Intention Recognition Based on the Probabilistic Inference

作　　者：彭武[1] 姚淑萍[2] 

机构地区：[1]北京理工大学机电学院,北京100081 [2]北京理工大学软件学院,北京100081

出　　处：《计算机科学》2010年第1期79-82,157,共5页Computer Science

摘　　要：攻击者的入侵行为背后往往蕴含着攻击者的目标和意图,据此提出了入侵意图识别的层次化模型。为了处理网络环境中的不确定性信息,提出了基于概率推理的入侵意图识别算法,并在此基础上预测攻击者的后续攻击规划和目标,从而起到提前预警的作用。根据网络安全事件、目标和意图之间的因果关系建立的贝叶斯网络能够描述和处理并发意图识别问题。试验证明了该方法的可行性和有效性。Intrusive behaviors of attackers always imply their objects and intentions,hereby a hierarchical model of intrusion intention recognition was proposed. In order to handle the uncertain message in the circumstance of computer networks,intrusion intention recognition algorithm based on probabilistic inference was presented. On this basis the future plans and goals of the attackers can be predicted in order to take actions in advance. Bayesian networks were constructed to cope with the concurrent intention recognition problems according to the relationship of network security events,goals and intentions. Feasibility and validity of this method were proved from the experiments.

关 键 词：意图识别 有效意图 概率推理 贝叶斯网络 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]