混合多层结构化网络入侵路径预测方法仿真  

Simulation of Intrusion Path Prediction Method for Hybrid Multi-Layer Structured Network

作　　者：杨湧[1] 戴晟辉 YANG Yong;DAI Sheng-hui(School of Electronic Information East China University of Technology,Fuzhou Jiangxi 344000,China)

机构地区：[1]东华理工大学信息工程学院,江西抚州344000

出　　处：《计算机仿真》2020年第12期465-468,473,共5页Computer Simulation

基　　金：国家自然科学基金项目(50479633);江西省教育厅科学技术研究项目(GJJ161590);江西省高等学校教学改革项目(JXJG16376);江西省科技支撑项目(20161BBE50087)。

摘　　要：现有的网络入侵路径研究主要集中于理想场景中的路径预测,但是理想入侵攻击路径绝非入侵者的真实路径,因此导致对入侵路径预测结果不准确、漏报率偏低。为此提出混合多层结构化网络入侵路径预测方法。对网络参数进行采集,并结合敏感度对参数进行求和和归一化处理;在一定时间内利用归一化处理结果计算节点存活度,并根据警报结果完成入侵信息的获取及处理;通过转移概率度量方法计算不同入侵路径的入侵概率以及入侵路径的期望值,求解入侵路径长度的期望值;将拓扑分析和所得期望值相结合,计算入侵路径的可利用性得分以及入侵路径长度,实现混合多层结构化网络入侵路径预测。仿真证明,相比于现有方法,上述方法能够快速、准确地对网络入侵路径进行预测,且入侵漏报率较低,频谱响应性能较理想,具有更强的应用优势。At present,the research of network invasion path mainly focuses on the path prediction in ideal scenes,but the ideal invasion attack path is not the real path,leading to the inaccurate prediction result of invasion path and the low false negative rate.Therefore,a method to predict the mixed multi-layer structured network intru-sion path was proposed.At first,the network parameters were collected.And then,these parameters were summed and normalized by the sensitivity.In a certain period of time,the node survivability was calculated by the normalized result.According to the alarm results,the intrusion information was processed.Moreover,the method of transfer probability measurement was used to calculate the invasion probability of different paths and the expected value of in-vasion path,and the expected value of length of invasion path was found.In addition,the topology analysis was com-bined with the expected value.Finally,the exploitable score and the length of intrusion path were calculated,and thus to predict the intrusion path of mixed multi-layer structured network.Simulation results show that,compared with the existing methods,the proposed method can predict the network intrusion path quickly and accurately.The missing report rate on intrusion is lower and the spectrum response performance is better.This method has stronger application advantages.

关 键 词：混合多层结构化网络 入侵路径 预测 节点存活度 期望值 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]