通信学报 ›› 2013, Vol. 34 ›› Issue (8): 53-61.doi: 10.3969/j.issn.1000-436x.2013.08.007

• 学术论文 • 上一篇    下一篇

网络异常性指数的一种直推式定量计算方法

张永铮1,周勇林2,杜飞1   

  1. 1 中国科学院 信息工程研究所,北京100093
    2 国家计算机网络应急技术处理协调中心,北京100029
  • 出版日期:2013-08-25 发布日期:2017-08-31
  • 基金资助:
    国家高技术研究发展计划(“863”计划)基金资助项目;国家高技术研究发展计划(“863”计划)基金资助项目;国家科技支撑计划基金资助项目;中国科学院战略性科技先导专项基金资助项目

Transductive quantitative calculation approach of network abnormality index

Yong-zheng ZHANG1,Yong-lin ZHOU2,Fei DU1   

  1. 1 Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China
    2 National Computer Network Emergency Response Technical Team/Coordination Center of China,Beijing 100029,China
  • Online:2013-08-25 Published:2017-08-31
  • Supported by:
    The National High Technology Research and Development Program of China (863 Program);The National High Technology Research and Development Program of China (863 Program);The National Science and Technology Support Program;The Knowledge Innovation Pro-gram of the Chinese Academy of Sciences

摘要:

针对网络异常性指数的计算问题,基于数量特征指数、成分特征指数、分布特征指数和模式特征指数提出了一种直推式定量计算方法——QCDP法,通过应用真实网络流数据的7个实验验证了该方法的有效性。理论分析与实验结果表明:与传统的基于流量的直推式方法相比,QCDP法能够更有效地反映出典型网络安全事件对宏观态势产生的影响;与归纳式方法相比,QCDP法具有更好的客观性、实时性和实用性。

关键词: 网络安全, 宏观态势, 异常性, 指数, 直推式

Abstract:

For the problem of network abnormality index calculation,a transductive quantitative calculation approach named QCDP was proposed based on quantitative characteristics index,composition characteristics index,distribution characteristics index and pattern characteristics index.Seven experiments using real network traces were made to validate the effectiveness of QCDP.Theoretical analysis and experimental results show that,compared with the traditional transductive method based on traffic,the QCDP can more effectively reflect the macro situation of typical network security incidents; compared with the inductive methods,the QCDP has better objectivity,instantaneity and practicability.

Key words: network security, macro situation, abnormality, index, transduction

No Suggested Reading articles found!