国产欧美精品一区二区,中文字幕专区在线亚洲,国产精品美女网站在线观看,艾秋果冻传媒2021精品,在线免费一区二区,久久久久久青草大香综合精品,日韩美aaa特级毛片,欧美成人精品午夜免费影视

工業(yè)控制網(wǎng)絡(luò )中APT攻擊檢測系統設計
DOI:
CSTR:
作者:
作者單位:

作者簡(jiǎn)介:

通訊作者:

中圖分類(lèi)號:

基金項目:

國家自然科學(xué)基金項目(面上項目,重點(diǎn)項目,重大項目)


Design of APT Attack Detection System in Industrial Control Network
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 圖/表
  • |
  • 訪(fǎng)問(wèn)統計
  • |
  • 參考文獻
  • |
  • 相似文獻
  • |
  • 引證文獻
  • |
  • 資源附件
  • |
  • 文章評論
    摘要:

    高級持續性威脅(advanced persistent threat, APT)是當今工控網(wǎng)絡(luò )安全首要威脅,而傳統的基于特征匹配的工業(yè)入侵檢測系統往往無(wú)法檢測出最新型的APT攻擊。現有研究者認為,敏感數據竊密是APT攻擊的重要目的之一。為了能準確識別出APT攻擊的竊密行為,對APT攻擊在竊密階段受控主機與控制與命令(Control and Command, C&C)服務(wù)器通信時(shí)TCP會(huì )話(huà)流特征進(jìn)行深入研究,采用深度流檢測技術(shù),并提出一種基于多特征空間加權組合SVM分類(lèi)檢測算法對APT攻擊異常會(huì )話(huà)流進(jìn)行檢測。實(shí)驗表明,采用深度流檢測技術(shù)對隱蔽APT攻擊具備良好的檢測能力,而基于多特征空間加權組合SVM分類(lèi)檢測算法較傳統單一分類(lèi)檢測的檢測精度更高,誤報率更低,對工控網(wǎng)絡(luò )安全領(lǐng)域的研究具有推進(jìn)作用。

    Abstract:

    The advanced persistent threat (APT) is the foremost threat to industrial network security today, and traditional feature detection-based industrial intrusion detection systems are often unable to detect the latest APT attacks. Existing researchers believe that theft of sensitive data is one of the important goals of APT attacks. In order to accurately identify the stealing behavior of the APT attack, the APT attack in the stealing phase controlled host and the control and command (C&C) server communication TCP flow characteristics in-depth study, the use of depth flow detection technology, and proposed a A multi-feature spatial weighted combination SVM classification detection algorithm is used to detect abnormal APT attack session flows. Experiments show that the use of depth flow detection technology has a good ability to detect hidden APT attacks, and the multi-feature spatial weighted combined SVM classification detection algorithm has higher detection accuracy and lower false alarm rate than traditional single classification detection, and it is also safe for industrial control security. The research has a promoting effect.

    參考文獻
    相似文獻
    引證文獻
引用本文

趙澄,方建輝,姚明海.工業(yè)控制網(wǎng)絡(luò )中APT攻擊檢測系統設計計算機測量與控制[J].,2018,26(10):250-254.

復制
分享
文章指標
  • 點(diǎn)擊次數:
  • 下載次數:
  • HTML閱讀次數:
  • 引用次數:
歷史
  • 收稿日期:2018-04-02
  • 最后修改日期:2018-04-08
  • 錄用日期:2018-04-08
  • 在線(xiàn)發(fā)布日期: 2018-10-16
  • 出版日期:
文章二維碼
清苑县| 南雄市| 化州市| 宁都县| 绵阳市| 子长县| 苗栗市| 台东县| 灵寿县| 灵丘县| 日土县| 寿阳县| 金阳县| 丘北县| 武城县| 岳池县| 溆浦县| 秭归县| 太谷县| 临邑县| 海原县| 宽甸| 南华县| 西安市| 岑溪市| 思南县| 平舆县| 顺昌县| 法库县| 汨罗市| 夏河县| 贵南县| 昔阳县| 会昌县| 舒城县| 仪陇县| 广西| 廉江市| 莎车县| 霸州市| 略阳县|