| 采用数据挖掘的拒绝服务攻击防御模型 |
| |
| 引用本文： | 童彬,秦志光,贾伟峰,宋健伟. 采用数据挖掘的拒绝服务攻击防御模型[J]. 电子科技大学学报(社会科学版), 2008, 0(4) |
| |
| 作者姓名： | 童彬 秦志光 贾伟峰 宋健伟 |
| |
| 作者单位： | 电子科技大学计算机科学与工程学院; |
| |
| 基金项目： | 电子信息产业发展基金(信部运[2005]555) |
| |
| 摘 要： | 针对拒绝服务攻击的特点,提出了一种采用数据挖掘技术的防御模型。该模型以实时抽样流量作为数据来源,采用关联分析法提取可信IP列表用于数据包的过滤,并利用贝叶斯分类算法对数据包的危险等级进行评估。该模型弥补了传统的基于可信IP列表过滤的不足,并在防御攻击时能有效区分正常流量与异常流量。实验证明该模型能够对拒绝服务攻击进行有效、实时的防御。
|
| 关 键 词： | 关联分析 贝叶斯分类 数据挖掘 拒绝服务 |
A DoS Attack Defense Model Adopting Data Mining |
| |
| TONG Bin,QIN Zhi-guang,JIA Wei-feng,, SONG Jian-wei. A DoS Attack Defense Model Adopting Data Mining[J]. Journal of University of Electronic Science and Technology of China(Social Sciences Edition), 2008, 0(4) |
| |
| Authors: | TONG Bin QIN Zhi-guang JIA Wei-feng SONG Jian-wei |
| |
| Affiliation: | TONG Bin,QIN Zhi-guang,JIA Wei-feng,, SONG Jian-wei (School of Computer Science , Engineering,University of Electronic Science , Technology of China Chengdu 610054) |
| |
| Abstract: | According to the characteristics of DoS/DDoS attack, a defense model adopting data-mining technology is proposed. Based on real-time sample traffic, this model extracts trusted IP list by association analysis to filter, and evaluates packets' danger degree by adopting bayes algorithm. This model makes up disadvantages of traditional filtering based on trusted source IP, and effectively differentiates normal traffic and abnormal traffic. Experimental datum proves this model can launch real-time and effective... |
| |
| Keywords: | association analysis Bayes classification data-mining denial of service |
| 本文献已被 CNKI 等数据库收录！ |
|
