多维校园网络信息流量泄露高效检测方法  

Efficient detection method of multi-dimensional campus network information flow leakage

作　　者：陈剑[1] 伍乙生 翟英杰 林羡中 乐海平 CHEN Jian;WU Yi-sheng;ZHAI Ying-jie;LIN Xian-zhong;LE Hai-ping(Zhaoqing Medical College,Zhaoqing 526020,Guangdong Province,China)

机构地区：[1]肇庆医学高等专科学校,广东肇庆526020

出　　处：《信息技术》2023年第3期40-44,共5页Information Technology

基　　金：2021年度肇庆市科技创新指导类项目(20210403060-04)。

摘　　要：当前校园网络受到攻击的类型不断增多,泄露信息间的关联度不高,泄露检测难度较大。为此提出新的多维校园网络信息流量泄露高效检测方法。计算校园网络信息流量熵值,采用OCAVM方式将信息流量熵转换成向量,并判别是否发生错报;利用多窗口关联方式对泄露信息做关联检测,实现多维校园网络信息流量泄露的高效检测。实验表明该方法可高效检测出多维校园网络泄露的信息流量,大幅度降低误报情况,CPU占用率低,对维护校园网络安全提供理论基础。At present,the types of attacks on campus network are increasing,the correlation between the leaked information is not high,and the detection of leakage is difficult.Therefore,a new multi-dimensional information leakage detection method based on traffic is proposed.The entropy value of campus network information flow is calculated,the information flow entropy is transformed into vector by OCAVM method,and the false positives are identified.The multi-window correlation method is used to detect the leaked information,and the efficient detection of multi-dimensional campus network information flow leakage is realized.The experimental results show that the proposed method can not only detect the leaked information flow of multi-dimensional campus network efficiently,but also greatly reduce the false positives and low CPU usage,which provides a theoretical basis for maintaining the security of multi-dimensional campus network.

关 键 词：多维校园网络 信息流 信息泄露 高效检测 熵值 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]