网络自保护机制的新方法  

A Novel Approach for Network Self-Protection Mechanism

作　　者：杨宏宇[1] 代其魁[1] 

机构地区：[1]中国民航大学计算机科学与技术学院,天津300300

出　　处：《北京邮电大学学报》2011年第3期122-126,共5页Journal of Beijing University of Posts and Telecommunications

基　　金：国家高技术研究发展计划项目(2006AA12A106);天津市科技支撑计划重点项目(07ZCKFGX01700);中国民航科技基金项目(RKXZY0814);中央高校基本科研业务费专项资金项目(ZXH2009A006;ZXH2010D009)

摘　　要：针对目前网络安全防护技术的缺陷,提出一种基于异常分析的网络自保护机制.为提高对网络攻击的检测能力和防护能力,提出一种基于多元异常分析的网络攻击检测算法.该算法根据网络流测量指标的异常偏差值对其进行分类,对不同种类的网络流分配不同的路由调度优先级,可明显削弱网络攻击对正常网络通信流的影响.实验结果表明,该自保护机制能显著提高网络系统应对分布式拒绝服务攻击的防护能力.A network self-protection mechanism based on abnormality analysis is presented aiming at deficiencies of current network security protection technologies. To improve the ability of detection and protection against network attacks, a network attack detection algorithm based on the multivariate abnormality analysis is proposed. The algorithm uses a metric of abnormal distance to classify the network flow into different types and prioritize the routing of the different network flow packets. In this way, the normal traffic flows can suffer the least impact from network attacks. Experiments show that our mechanism can significantly improve the network system＇ s protection ability against distributed denial of service attacks.

关 键 词：自保护 网络攻击 异常分析 机制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393.08[自动化与计算机技术—计算机科学与技术]