基于应用运行时自保护的网络攻击溯源方法  

Cyber Attack Attribution Method Based on RASP

作　　者：蓝鑫冲 郭新海 刘安 丁攀[1,2] 王戈 Lan Xinchong;Guo Xinhai;Liu An;Ding Pan;Wang Ge(China Unicom Research Institute,Beijing 100048,China;Next Generation Internet Broadband Service Application National Engineering Research Center,Beijing 100048,China)

机构地区：[1]中国联通研究院,北京100048 [2]下一代互联网宽带业务应用国家工程研究中心,北京100048

出　　处：《邮电设计技术》2023年第8期19-23,共5页Designing Techniques of Posts and Telecommunications

摘　　要：近年来,以高级持续性威胁(APT)为代表的高级网络攻击已经对政府、能源、金融、通信等诸多领域造成了巨大的影响。因此,开展网络攻击溯源技术的研究实现对高级网络攻击溯源成为网络安全领域的重要研究方向。介绍了基于应用运行时自保护技术(Runtime application self-protection,RASP)的网络攻击溯源方法,通过生成综合指纹标识网络攻击者,提高网络攻击溯源的准确性。In recent years,cyber attacks represented by APT(Advanced Persistent Threat)have had a huge impact on many fields such as government,industrial systems,finance,telecommunications,and so on.Therefore,the attribution technology of cyber attacks has become an important research direction in the field of network security.It introduces a cyber attack attribution method based on Runtime application self-protection(RASP)technology,which improves the accuracy of cyber attack attribution by generating comprehensive fingerprint identification of cyber attackers.

关 键 词：应用运行时自保护 网络攻击 溯源 综合指纹 

分 类 号：TN915.08[电子电信—通信与信息系统]