基于关联分析的网络漏洞攻击智能检测方法  

An Intelligent Detection Method of Network Vulnerability Attack Based on Correlation Analysis

作　　者：盛权为[1] SHENG Quanwei(Changsha Medical University,Changsha Hunan 410219,China)

机构地区：[1]长沙医学院,湖南长沙410219

出　　处：《信息与电脑》2022年第13期238-240,共3页Information & Computer

基　　金：教育部科技发展中心“高校智慧校园系统漏洞检测与治理的应用研究”(项目编号:2020ITA07034)。

摘　　要：由于传统方法在网络漏洞攻击智能检测应用中延迟时间较长,为此提出基于关联分析的网络漏洞攻击智能检测方法。通过在网络中安插扫描插件,全面扫描网络端口、数据库、操作系统、Web、安全基线、弱口令以及工控系统,并获取数据。利用异常数据传播规则提取异常数据,并利用关联分析技术分析异常数据,进而识别网络漏洞攻击。实验证明,该设计方法延迟时间短于传统方法,在网络漏洞攻击智能检测方面具有较好的应用前景。Due to the long delay time of traditional methods in the application of intelligent detection of network vulnerability attacks,an intelligent detection method of network vulnerability attacks based on correlation analysis is proposed.By inserting scanning plug-ins in the network,comprehensively scan network ports,databases,operating systems,Web,security baselines,weak passwords and industrial control systems to obtain data.Use abnormal data propagation rules to extract abnormal data,and use correlation analysis technology to analyze abnormal data is analyzed to identify network vulnerability attacks.Experiments show that the delay time of the design method is shorter than that of the traditional method,and it has a good application prospect in the intelligent detection of network vulnerability attacks.

关 键 词：关联分析 网络漏洞攻击 智能检测 传播规则 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]