基于双模调频分解的网络攻击信号检测算法  

Network Attack Signal Detection Algorithm Based on Dual Mode Frequency Modulation Decomposition

作　　者：郭慧玲[1] 齐迎春[1] 杨俊[2] 

机构地区：[1]周口师范学院计算机科学与技术学院,河南周口466001 [2]中山大学信息科学与技术学院,广东广州510006

出　　处：《计算机仿真》2015年第9期445-449,共5页Computer Simulation

基　　金：河南省科技厅软科学项目(142400411133);河南省科技厅软科学项目(142400411058)

摘　　要：针对网络攻击信号检测进行时无法对未分解的网络信号进行准确检测的问题,采用传统算法进行检测,一旦检测的网络未分解信号频率发生变化,对攻击信号数据产生干扰,导致网络攻击信号检测准确率低。提出双模调频分解的网络攻击信号检测方法。利用线性调频双模基函数对网络信号进行展开,自适应地选取线性调频基函数对网络信号进行投影分解。通过网络信号的分解结果与网络攻击信号的特征进行比较,当存在网络攻击行为时,网络信号中与攻击行为对应的特征频率会发生变化,根据网络信号频率的变化情况,完成对网络攻击信号的检测。实验结果表明,利用改进算法进行网络攻击信号检测,能够提高网络攻击信号检测的准确率,效果令人满意。The paper proposed a network attack signal detection method based on dual mode frequency modulation （FM） decomposition. The linear FM dual mode primary function was applied to carry out the network signal, and the linear FM primary function was adaptively selected to make projected decomposition of the network signal. Through the comparison of the decomposition resuhs of network signals and the characteristics of network attack signals, in the presence of network attacks, the characteristic frequency corresponding to the aggressive behavior in network signal can change. According to the changes of the frequency of network signals, the detection of network attack signals was realized. The experimental results show that using the improved algorithm for the detection of network attack signal can improve the accuracy of the detection of network attack signal and the results are satisfactory.

关 键 词：双模调频分解 网络攻击 信号检测 

分 类 号：TP332[自动化与计算机技术—计算机系统结构]