Abstract: This paper presents an approach detecting the distributed denial of services attack Mstream. Based on the probabilistic fuzzy cognitive map (PFCM), the Mstream attack map is constructed to describe Mstream attack. This attack map expresses the temporal sequence, the restriction and the uncertainty of the factor relations by applying probability measure. By applying the fuzzy theory, a PFCM-based Mstream attack detection algorithm is designed. The test results show that the approach can detect Mstream attack and judge the degree of Mstream attack.

Key words: Distributed denial of services; Intrusion detection; Probabilistic fuzzy cognitive map; Mstream attack

摘要： 提出了一种分布式拒绝服务攻击Mstream 的检测方法。设计基于概率模糊认知图(PFCM)的Mstream 攻击图，并以该图描述Mstream攻击，利用概率测度表述事件间的时序关系、约束关系和关系的不确定性，结合模糊理论设计基于PFCM 的Mstream 攻击检测算法。实验表明，该方法不但能准确检测出分布式拒绝服务攻击Mstream，而且还能判断出正在进行中的Mstream 攻击的程度。

关键词: 分布式拒绝服务；入侵检测；概率模糊认知图；Mstream 攻击