高泽芳, 王岱辉, 王昀, et al. Research on real-time warning of network attack behavior based on characteristics of alarm events[J]. 2018, 31(12): 33-37. DOI: 10.13992/j.cnki.tetas.2018.12.008.
Research on real-time warning of network attack behavior based on characteristics of alarm events
摘要
针对当前网络告警数据误报率过高以及新型网络攻击行为难以预测的问题
本文提出基于告警事件特征的网络攻击行为预测方法:采用FP
t
ree挖掘告警事件的关联规则并剔除虚假告警;然后利用序列模式提取网络攻击行为的特征
形成网络攻击事件组合规则
实现网络攻击行为的有效预警。通过相关的实验过程和结果分析
表明本文提出的方法能够有效、实时预警网络的攻击行为
具有一定的应用性和扩展性。
Abstract
In view of the high false alarm rate of network alarm data and the diffi culty of predicting new network attack behaviors
this paper proposes a network attack prediction method based on the characteristics of alarm events. First
FP
t
ree is used to mine association rules of alarm events and eliminate false alarm. Then
the sequence pattern is used to extract the characteristics of network attacks
and the combination rules of network attacks are formed to realize the effective early warning of network attacks. Through the analysis of the related experimental process and results
it is shown that the proposed method can effectively and real-time warn the attack behavior of the network