基于事件流数据世系的网络渗透攻击防御方法  

Network Penetration Attack Defense Method Based on Event Flow Data Lineage

作　　者：廖西 樊洁馨 LIAO Xi;FAN Jie-xin(Chengdu College of University of Electronic Science and Technology of China,Chengdu Sichuan 611731,China;School of Cybersecurity,Chengdu University of Information Technology,Chengdu Sichuan 610225,China)

机构地区：[1]电子科技大学成都学院,四川成都611731 [2]成都信息工程大学网络空间安全学院,四川成都610225

出　　处：《计算机仿真》2024年第3期406-409,430,共5页Computer Simulation

基　　金：电子科技大学成都学院2021年国腾创投基金项目(GTJG-12)。

摘　　要：为了保证网络通信安全,降低网络攻击风险,提出基于事件流数据世系的网络渗透攻击防御方法。通过构建网络攻击信号模型,对时间尺度实行划分,完成数据采集与信号拟合;利用主元分析提取网络动态特征,剔除全部的攻击变量共线性,令网络中的隐藏信息显现出来;将网络信息流分割为各种数据世系,按照类似接近程度对备选数据世系实行排序,识别产生信息关联异常事件,防御攻击数据,保障网络安全。通过实验,证明所提方法能够防御网络渗透攻击,且所用时间较短,具有可应用价值。In order to ensure the security of network communication and reduce the risk of network attack,based on event stream data lineage,this paper presented a method of defending network penetration attacks.Firstly,the time scale was divided by constructing a network attack signal model,and then the data acquisition and signal fitting were completed.Secondly,the principal component analysis was used to extract the dynamic characteristics of the network and eliminate the collinearity of all attack variables,thus making the hidden information in the network visible.Thirdly,the network information flow was divided into several data lineages.Moreover,alternative data lineages were sorted according to the similar proximity.Meanwhile,the abnormal events related to information were identified.Finally,the attack data was defended to ensure network security.Experiment results prove that the proposed method can defend against network penetration attacks,with less time is short,so it has good practical value.

关 键 词：事件流数据世系 网络渗透攻击 网络攻击防御 特征提取 信息熵 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]