国产欧美精品一区二区,中文字幕专区在线亚洲,国产精品美女网站在线观看,艾秋果冻传媒2021精品,在线免费一区二区,久久久久久青草大香综合精品,日韩美aaa特级毛片,欧美成人精品午夜免费影视

工業(yè)控制網(wǎng)絡(luò )中APT攻擊檢測系統設計
DOI:
CSTR:
作者:
作者單位:

作者簡(jiǎn)介:

通訊作者:

中圖分類(lèi)號:

基金項目:

國家自然科學(xué)基金項目(面上項目,重點(diǎn)項目,重大項目)


Design of APT Attack Detection System in Industrial Control Network
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 圖/表
  • |
  • 訪(fǎng)問(wèn)統計
  • |
  • 參考文獻
  • |
  • 相似文獻
  • |
  • 引證文獻
  • |
  • 資源附件
  • |
  • 文章評論
    摘要:

    高級持續性威脅(advanced persistent threat, APT)是當今工控網(wǎng)絡(luò )安全首要威脅,而傳統的基于特征匹配的工業(yè)入侵檢測系統往往無(wú)法檢測出最新型的APT攻擊。現有研究者認為,敏感數據竊密是APT攻擊的重要目的之一。為了能準確識別出APT攻擊的竊密行為,對APT攻擊在竊密階段受控主機與控制與命令(Control and Command, C&C)服務(wù)器通信時(shí)TCP會(huì )話(huà)流特征進(jìn)行深入研究,采用深度流檢測技術(shù),并提出一種基于多特征空間加權組合SVM分類(lèi)檢測算法對APT攻擊異常會(huì )話(huà)流進(jìn)行檢測。實(shí)驗表明,采用深度流檢測技術(shù)對隱蔽APT攻擊具備良好的檢測能力,而基于多特征空間加權組合SVM分類(lèi)檢測算法較傳統單一分類(lèi)檢測的檢測精度更高,誤報率更低,對工控網(wǎng)絡(luò )安全領(lǐng)域的研究具有推進(jìn)作用。

    Abstract:

    The advanced persistent threat (APT) is the foremost threat to industrial network security today, and traditional feature detection-based industrial intrusion detection systems are often unable to detect the latest APT attacks. Existing researchers believe that theft of sensitive data is one of the important goals of APT attacks. In order to accurately identify the stealing behavior of the APT attack, the APT attack in the stealing phase controlled host and the control and command (C&C) server communication TCP flow characteristics in-depth study, the use of depth flow detection technology, and proposed a A multi-feature spatial weighted combination SVM classification detection algorithm is used to detect abnormal APT attack session flows. Experiments show that the use of depth flow detection technology has a good ability to detect hidden APT attacks, and the multi-feature spatial weighted combined SVM classification detection algorithm has higher detection accuracy and lower false alarm rate than traditional single classification detection, and it is also safe for industrial control security. The research has a promoting effect.

    參考文獻
    相似文獻
    引證文獻
引用本文

趙澄,方建輝,姚明海.工業(yè)控制網(wǎng)絡(luò )中APT攻擊檢測系統設計計算機測量與控制[J].,2018,26(10):250-254.

復制
分享
文章指標
  • 點(diǎn)擊次數:
  • 下載次數:
  • HTML閱讀次數:
  • 引用次數:
歷史
  • 收稿日期:2018-04-02
  • 最后修改日期:2018-04-08
  • 錄用日期:2018-04-08
  • 在線(xiàn)發(fā)布日期: 2018-10-16
  • 出版日期:
文章二維碼
伊宁县| 锡林郭勒盟| 金山区| 三台县| 巴中市| 青龙| 昔阳县| 响水县| 霍邱县| 临海市| 福安市| 靖州| 嘉兴市| 精河县| 绥江县| 建昌县| 施甸县| 太保市| 宿松县| 崇阳县| 泸定县| 南汇区| 卓资县| 股票| 大方县| 东源县| 杭州市| 龙泉市| 武定县| 丰城市| 宁明县| 繁峙县| 衢州市| 邵阳市| 康平县| 咸丰县| 宜春市| 桦甸市| 益阳市| 伊吾县| 察雅县|