基于IP通信频次特征的资产发现及入侵检测分析研究  

Research on Asset Discovery and Intrusion Detection Analysis Based on IP Communication Frequency Characteristics

作　　者：张绳武 ZHANG Shengwu(Hubei Branch of National Computer Network Emergency Response Technical Team/Coordination Center of China,Wuhan,Hubei Province 430000)

机构地区：[1]国家计算机网络应急技术处理协调中心湖北分中心,湖北武汉430000

出　　处：《长江信息通信》2024年第7期198-200,219,共4页Changjiang Information & Communications

摘　　要：文章介绍了利用IP通信频次特征对目标资产进行拓展发现、可用性监测、入侵检测、行为分析等方面的研究。首先介绍了国内外关于IP通信频次特征分析的研究现状,然后阐述了IP通信频次特征分析技术特点以及相关应用方向。接着,详细介绍了实验的数据收集、分析、特征提取、判断验证等过程以及最终的实验结果。最后,对研究结果进行了总结,分析了可取之处以及存在的不足,并提出了改进方向的相关建议。This paper introduces research on the expansion of target asset discovery,availability monitoring,intrusion detcction,and behavioral analysis using IP communication frequency char-acteristics.It begins by presenting the current state of recscarch on IP communication frequency characteristic analysis both domestically and internationally.The paper then expounds on the technical features of IP communication frequency characteristic analysis and its related applica-tion directions.Following that,it provides a detailed description of the experiment's data collec-tion,analysis,machine learning,verification processes,and the final experimental results.Final-ly,it summarizes its highlights and shortcomings,with suggestions for potential improvements.

关 键 词：IP通信频次 特征提取 资产发现 入侵检测 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]