网络攻击行为溯源分析技术与实现方法研究  

Research on Traceability Analysis Technology and Implementation Method of Network Attack Behavior

作　　者：胡少欣 尹星 张燊 高衍建 魏园 赵杨 HU Shaoxin;YIN Xing;ZHANG Shen;GAO Yanjian;WEI Yuan;ZHAO Yang(Hebei Huadian Shijiazhuang Yuhua Thermal Power Co.,Ltd.,Shijiazhuang 051430,China)

机构地区：[1]河北华电石家庄裕华热电有限公司,石家庄051430

出　　处：《移动信息》2025年第4期195-197,共3页Mobile Information

摘　　要：随着数字化转型的深入,网络攻击呈现出多样化和复杂化的特征,给网络安全带来了巨大挑战。文中聚焦于网络攻击行为的溯源分析技术,深入探讨了日志分析、流量监控、威胁情报整合、恶意代码逆向分析以及区块链技术在攻击溯源中的应用,并提出了一套多技术融合的溯源体系架构。研究结果表明,多层次溯源架构能显著提高攻击路径还原的效率和精度,为构建有效的网络防护机制提供了理论基础与实践指导。With the deepening of digital transformation,network attacks present diverse and complex characteristics,which brings great challenges to cyber security.This paper focuses on the traceability analysis technology of network attack behavior,and in-depth discusses the application of log analysis,traffic monitoring,threat intelligence integration,malicious code reverse analysis and blockchain technology in attack traceability,and proposes a multi-technology fusion traceability architecture.The research results show that the multi-level traceability architecture can significantly improve the efficiency and accuracy of attack path reduction,providing theoretical basis and practical guidance for building an effective network protection mechanism.

关 键 词：网络攻击溯源 日志分析 流量监控 威胁情报整合 区块链技术 

分 类 号：TN915.08[电子电信—通信与信息系统]