多样入侵下内部网络攻击追踪溯源方法设计  

Design of internal network attack tracing method under various invasion

作　　者：白磊 Bai Lei(School of Information Engineering,Zhengzhou University of Industrial Technology,Zhengzhou 451150,China)

机构地区：[1]郑州工业应用技术学院信息工程学院,郑州451150

出　　处：《现代计算机》2024年第12期42-46,共5页Modern Computer

摘　　要：为了提高网络安全性,提出一种多样入侵下内部网络攻击追踪溯源方法。针对不同攻击类型计算出潜在攻击数据比例,标记正常的网络流量数据和潜在攻击数据;根据计算结果部署多目标网络攻击追踪溯源节点,明确追踪溯源节点网络监测范围;在多样入侵环境下,展开协作分组的网络攻击追踪溯源。测试结果表明:通过纯随机、点覆盖和转发路径三种追踪溯源路径测定得出的网络攻击的追踪溯源成功率均可以达到60%以上,且追踪结果覆盖率达到了90%以上,说明在多样入侵攻击下,所设计的追踪溯源方法应用效果较好,具有实际应用价值。To improve network security,a method for tracking and tracing internal network attacks under diverse intrusions is proposed.Calculate the proportion of potential attack data for different types of attacks,mark normal network traffic data and potential attack data;Deploy multi-target network attack tracking and tracing nodes based on the calculation results,and clarify the network monitoring scope of the tracking and tracing nodes;Collaborate and group network attack tracing in diverse intrusion environments.The test results show that the success rate of network attack tracing and tracing determined through three types of tracing and tracing paths:pure random,point coverage,and forwarding path can all reach over 60%,and the coverage rate of tracing results can reach over 90%.This indicates that the designed tracing method has good application effect under various intrusion attacks and has practical application value.

关 键 词：多样入侵 内部网络 网络攻击 追踪溯源 潜在攻击数据 节点部署 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]