摘要： 从已知的入侵方法出发,对攻击序列进行拓扑排序及同构类扩充,扩展到一个场景或一类入侵,通过构建基于场景和状态转换分析的入侵检测模型来检测基于类的入侵问题。模型在某种程度上可预防入侵及检测到未知的入侵。

关键词: Case, 入侵检测, 状态转换, 场景, 规则

Abstract: This paper presents a Scenario-based and state transition analysis(SBASTA) about intrusion detection,which can solve some problems existing in intrusion detection system.Based on a known attack manner,it sorts the intrusion sequence with topology analysis,extends isomorphism class,and expands to detect a scenario/class of intrusion problem.It not only prevents from breaking into system in advance,but also finds out some anomaly intrusions to some extend.

中图分类号: 

• TP393.08