基于入侵响应的计算机与网络攻击分类法  

Classification of Computer and Network Attacks Based on Intrusion Response

作　　者：汤冠楚 TANG Guanchu(Artificial Intelligence Department of Jiangxi University of Technology,Nanchang 330098,China)

机构地区：[1]江西科技学院人工智能学院,江西南昌330098

出　　处：《现代信息科技》2021年第11期162-165,共4页Modern Information Technology

摘　　要：基于入侵响应提出了一种计算机与网络攻击分类法,以在自动入侵响应过程中建立响应和攻击的一一对应关系。在分析攻击分类法的现有研究成果和入侵响应特定需求的基础上,该分类法将攻击分为三大主要维度,并从响应的角度对它们进行了细分。第一维定位于对攻击源的划分,第二维覆盖攻击者所采用的各类攻击方式,第三维关注攻击的危害。通过采用该分类法,在AIR系统中成功建立了攻击与响应的对应关系。经对典型攻击的应用验证,检验了其实用性与可行性。On the basis of the intrusion response,a classification of computer and network attack is proposed to establish a one-toone relationship between response and attack in the process of automatic intrusion response.Based on the analysis of the existing research results of attack classification and the specific needs of intrusion response,the classification divides attacks into three main dimensions and subdivides them from the perspective of response.The first dimension focuses on the division of attack sources,the second dimension covers all kinds of attack methods adopted by attackers,and the third dimension focuses on the harm of attacks.By using this classification,the corresponding relationship between attack and response is successfully established in AIR system.Through the application verification of typical attacks,its practicability and feasibility are tested.

关 键 词：攻击分类法 自动入侵响应 网络攻击 主机攻击 攻击技术 

分 类 号：TN915.08[电子电信—通信与信息系统] TP301[电子电信—信息与通信工程]