基于非确定树自动机的复合攻击建模研究  

RESEARCH ON MODELLING COMPOSITE ATTACK BASED ON NONDETERMINISTIC TREE AUTOMATON

作　　者：罗俊丽[1] 

机构地区：[1]许昌学院计算机科学与技术学院,河南许昌461000

出　　处：《计算机应用与软件》2013年第10期64-66,共3页Computer Applications and Software

基　　金：国家自然科学基金项目(61003035)

摘　　要：攻击模型是检测网络攻击的有效方法,通过对复合攻击建模方法的研究,提出一种基于非确定树形自动机的建模方法。该方法扩展和改进了传统攻击树的建模方法,基于非确定树自动机对复合攻击进行建模。自动机可以接受树形的数据结构的输入,复合攻击的攻击过程表现为树形自动机中从叶子节点到根节点的移动。该方法不但可以形式化描述复合攻击过程,并且能够检测正在发生的攻击和报告攻击完成水平。实验结果证实该方法的有效性。Attack model is an effective means to detect the network attacks. We present a modelling approach which is based on nondeterministic tree automaton through studying the modelling method of composite attacks. The method extends and improves the modelling method in traditional attack tree, it models the composite attacks based on nondeterministic tree automaton. The automaton can accept an input of data structure in tree form, the attack process of the composite attacks is represented in the way of the movement from leaves nodes to roots nodes in a tree-form automaton. The approach can give the formal description on composite attacks process, besides, it can also detect the attacks takin~ place right now and report the completion level of the attacks. Experimental results test the validity of the method.

关 键 词：攻击建模 攻击树 自动机 网络安全 网络攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]