面向智能攻击的行为预测研究  

Research on Behavior-Prediction for Intelligent Attacks

作　　者：马钰锡 张全新[1] 谭毓安[1] 沈蒙[2,3] MA Yu-Xi;ZHANG Quan-Xin;TAN Yu-An;SHEN Meng(School of Computer Science and Technology,Beijing Institute of Technology,Beijing 100081,China;School of Cyberspace Security,Beijing Institute of Technology,Beijing 100081,China;Cyberspace Security Research Center,Peng Cheng Laboratory,Shenzhen 518055,China)

机构地区：[1]北京理工大学计算机学院,北京海淀100081 [2]北京理工大学网络空间安全学院,北京海淀100081 [3]鹏城实验室网络空间安全研究中心,广东深圳518055

出　　处：《软件学报》2021年第5期1526-1546,共21页Journal of Software

基　　金：国家自然科学基金(61876019,61972039);北京市自然科学基金(4192050);北京市科技新星计划(Z201100006820006);广东省重点领域研发计划(2019B010136001);之江实验室开放课题(2020AA3AB04)。

摘　　要：人工智能的迅速发展和广泛应用促进了数字技术的整体跃升.然而,基于人工智能技术的智能攻击也逐渐成为一种新型的攻击手段,传统的攻击防护方式已经不能满足安全防护的实际需求.通过预测攻击行为的未来步骤,提前部署针对性的防御措施,可以在智能攻击的对抗中取得先机和优势,有效保护系统安全.首先界定了智能攻击和行为预测的问题域,对相关研究领域进行了概述;然后梳理了面向智能攻击的行为预测的研究方法,对相关工作进行分类和详细介绍;之后,分别阐述了不同种类的预测方法的原理机制,并从特征及适应范围等角度对各个种类的方法做进一步对比和分析;最后,展望了智能攻击行为预测的挑战和未来研究方向.The rapid development and broad application of artificial intelligence have promoted the overall leap in digital technology.However,intelligent attacks based on artificial intelligence technology have gradually become a new type of attack method.Traditional attack protection methods have been far from meeting the requirements of security protection.By predicting the future steps of the attack behavior and deploying targeted defense measures in advance,the opportunities and advantages can be obtained in the confrontation of intelligent attacks and system security is effectively protected.This study first defines the problem domain of behavior-prediction and intelligent attacks and outlines its related research areas.Then it combs the research methods of behavior-prediction for intelligent attacks,and introduces the classification and related work in detail.After that,the principle and mechanism of different types of prediction methods are explained,respectively.Each type's methods are further compared,discussed,and analyzed from the perspective of characteristics and adaptation scope.Finally,the challenges and future directions of intelligent attack behavior-prediction are prospected.

关 键 词：攻击预测 行为预测 智能攻击 攻击行为 人工智能 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]