作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2013, Vol. 39 ›› Issue (7): 1-6. doi: 10.3969/j.issn.1000-3428.2013.07.001

• 专栏 • 上一篇    下一篇

网络入侵早期检测方法的研究与实现

刘白璐,杨雅辉,沈晴霓,张 英   

  1. (北京大学软件与微电子学院,北京 102600)
  • 收稿日期:2012-07-05 出版日期:2013-07-15 发布日期:2013-07-12
  • 作者简介:刘白璐(1988-),女,硕士,主研方向:网络安全;杨雅辉,教授、博士、CCF会员;沈晴霓,副教授;张 英,研究员
  • 基金资助:

    国家自然科学基金资助项目(61070237, 61073156)

Study and Implementation of Early Network Intrusion Detection Method

LIU Bai-lu, YANG Ya-hui, SHEN Qing-ni, ZHANG Ying   

  1. (School of Software and Microelectronics, Peking University, Beijing 102600, China)
  • Received:2012-07-05 Online:2013-07-15 Published:2013-07-12

摘要:

在网络入侵发生的早期进行检测对于提高在线入侵检测系统的实时性至关重要。针对网络入侵的早期检测,提出一组描述网络入侵早期行为的特征,设计早期特征在线提取算法。采用GHSOM神经网络算法作为分类器,实现基于神经网络的在线入侵早期检测系统。实验结果证明,该方法对绝大多数攻击的早期检测率在80%以上。与非早期检测相比,可优化在线检测的实时性,提高检测率。

关键词: 入侵早期检测, 早期特征, 入侵行为, 神经网络, 特征提取, 网络安全

Abstract:

It is important to improve the real-time of online intrusion detection system in the early stage of network intrusion. Aiming at the early detection on network intrusion that detects the anomaly traffic at beginning phase of network attack, feature is extracted to describe the behavior of network invasion, and the algorithm of extraction is designed. An online intrusion detection system is represented based on the algorithm of GHSOM. Experimental result proves that most attacks’ early detected ratio is above 80% used by this method, and early detection optimizes speed and efficiency of online intrusion detection system.

Key words: early intrusion detection, early feature, intrusion behavior, neural network, feature extraction, network security

中图分类号: