基于随机森林的无线通信网络HTTP洪泛攻击检测方法  

HTTP flood attack detection method based on random forest

作　　者：徐李荔 翟义强 XU Lili;ZHAI Yiqiang(Nantong Public Security Bureau Network Security Detachment,Nantong 226000,China)

机构地区：[1]南通市公安局网安支队,江苏南通226000

出　　处：《无线互联科技》2024年第18期44-46,共3页Wireless Internet Science and Technology

摘　　要：HTTP洪泛攻击的作用位置以及方式具有不唯一性,导致对其检测的可靠性较低,检测结果并不理想。为解决这一问题,文章提出基于随机森林的无线通信网络HTTP洪泛攻击检测方法。该方法使用梯度提升决策树提取无线通信网络中HTTP洪泛攻击的特征,通过特征匹配机制识别满足单一攻击特征的数据并输出,完成无线通信网络HTTP洪泛攻击检测。实验结果表明,应用文章方法得到检测结果的F1值始终稳定在0.96以上,应用效果较好。Due to the unique position and mode of HTTP flooding attack,the reliability of its detection is low,and the detection results are not ideal.To solve this problem,the HTTP flood attack detection method based on random forest is proposed.This method uses the gradient promotion decision tree to extract the features of HTTP flooding attack in the wireless communication network,identifies and outputs the data that satisfy the single attack feature through the feature matching mechanism to complete the HTTP flooding attack detection in the wireless communication network.The experimental results show that the F1 value of the test results is always stable above 0.96,and the application effect is good.

关 键 词：随机森林 无线通信网络 HTTP洪泛攻击 梯度提升决策树 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]