基于移动模糊推理的DoS攻击检测方法  

DoS Attack Detection Method Based on Removal Fuzzy Reasoning

作　　者：李晶皎[1] 许哲万[1,2] 王爱侠[1] 郭先日[2] 

机构地区：[1]东北大学信息科学与工程学院,辽宁沈阳110819 [2]金日成综合大学计算机科学大学,朝鲜平壤999093

出　　处：《东北大学学报（自然科学版）》2012年第10期1394-1398,共5页Journal of Northeastern University(Natural Science)

基　　金：国家自然科学基金资助项目(60970157);辽宁省博士启动基金资助项目(2081019)

摘　　要：通过对入侵检测中模糊技术应用和移动模糊推理方法的研究,设计并实现了基于移动模糊推理的DoS攻击入侵检测系统.首先,描述了移动模糊推理方法与模糊推理步骤;其次,详细阐述了用时间差与IP地址分布变化的DoS攻击检测方法与基于移动模糊推理的攻击检测系统,创建了用于检测的模糊规则,确定网络攻击.最后,把DoS攻击工具与DARPA 98数据集作为入侵检测数据集,对基于移动模糊推理的方法与现行方法进行测试,验证了所提方法的有效性.According to the study of the application of fuzzy technique in the intrusion detection and removal fuzzy reasoning method, the DoS attack intrusion detection system was designed and realized on the basis of removal fuzzy reasoning method. Firstly, the removal fuzzy reasoning method and fuzzy reasoning step were described. Then, DoS attack detection method using the interval and the IP address distribution change was described and so was the detection system based on removal fuzzy reasoning. The fuzzy rules for detection were made to determine network attack. Finally, the validity of the proposed method was checked by testing the method based on the removal fuzzy reasoning and the existing method with DoS attack tool and DARPA 98 dataset as intrusion detection dataset.

关 键 词：网络 模糊推理 入侵检测 DOS攻击检测 异常检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]