基于攻击流量的网络安全漏洞检测技术  

Network Security Vulnerability Detection Technology Based on Attack Traffic

作　　者：涂珂 TU Ke(Beijing Fibrlink Communications Co.,Ltd.,Beijing 100070 China)

机构地区：[1]北京中电飞华通信有限公司,北京100070

出　　处：《自动化技术与应用》2024年第9期89-92,179,共5页Techniques of Automation and Applications

基　　金：2019年度北京市普通高校重点科研特色创新类项目(2020GKTSCX025)。

摘　　要：网络安全漏洞的及时检测是保证计算机正常运行的重要因素之一,基于攻击流量的网络攻击是近年来威胁计算机安全的主要攻击方法,针对目前检测技术存在误识率高、检测效果不佳的问题,提出基于攻击流量的网络安全漏洞检测技术。建立网络流量模型对流量特点实行分析;在此基础上,基于类标记扩展的半监督法生成网络流量特征;结合K-奇异值分解法和匹配跟踪法至攻击流量检测方法中,完成网络安全漏洞检测。实验结果表明,所提方法的网络安全漏洞检测正确率较高、精确率较高,具有较好的应用效果。The timely detection of network security vulnerabilities is one of the important factors to ensure the normal operation of computers.Network attacks based on attack traffic are the main attack methods that threaten computer security in recent years.At present,aiming at the problems of high error rate and poor detection effect of detection technology,an detection technology of network security vulnerabilities based on attack traffic is proposed.It establishes network traffic model to analyze traffic characteristics.On this basis,network traffic characteristics are generated by semi supervised method based on class label expansion.Combining K-singular value decomposition method and matching tracking method to attack traffic detection method,network security vulnerability detection is completed.The experimental results show that the proposed method has high accuracy and accuracy in network security vulnerability detection,and has a good application effect.

关 键 词：攻击流量 网络安全漏洞 检测 特征提取 半监督法 自适应匹配 

分 类 号：TP393.083[自动化与计算机技术—计算机应用技术]