网络异常性指数的一种直推式定量计算方法

doi:10.3969/j.issn.1000-436x.2013.08.007

Abstract

Abstract:

For the problem of network abnormality index calculation,a transductive quantitative calculation approach named QCDP was proposed based on quantitative characteristics index,composition characteristics index,distribution characteristics index and pattern characteristics index.Seven experiments using real network traces were made to validate the effectiveness of QCDP.Theoretical analysis and experimental results show that,compared with the traditional transductive method based on traffic,the QCDP can more effectively reflect the macro situation of typical network security incidents; compared with the inductive methods,the QCDP has better objectivity,instantaneity and practicability.

Key words: network security, macro situation, abnormality, index, transduction

Yong-zheng ZHANG,Yong-lin ZHOU,Fei DU. Transductive quantitative calculation approach of network abnormality index[J]. Journal on Communications, 2013, 34(8): 53-61.

Figures/Tables 6

References 14

[1]	张永铮, 云晓春 . 网络运行安全指数多维属性分类模型[J]. 计算机学报, 2012,35(8): 1666-1674. ZHANG Y Z , YUN X C . Network operation security index classification model with multidimensional attributes[J]. Chinese Journal of Computers, 2012,35(8): 1666-1674.
[2]	ZHANG Y Z , YUN X C . Modeling of hierarchical index system for network operation security[A]. ISCTCS[C]. Beijing,China, 2013. 580-590.
[3]	HE Y H , ZHANG Y Z . Network availability index and its flow-based quantitative calculation method[A]. ICCET[C]. Chengdu,China, 2010. 551-555.
[4]	李洋, 方滨兴, 郭莉 ,等. 基于直推式方法的网络异常检测方法[J]. 软件学报, 2007,18(10): 2595-2604. LI Y , FANG B X , GUO L ,et al. A network anomaly detection method based on transduction scheme[J]. Journal of Software, 2007,18(10): 2595-2604.
[5]	NYCHIS G , SEKAR V , ANDERSEN D G ,et al. An empirical evaluation of entropy-based traffic anomaly detection[A]. IMC[C]. Vouliagmeni,Greece, 2008. 151-156.
[6]	ZHANG J , ZULKERNINE M . Anomaly based network intrusion detection with unsupervised outlier detection[A]. ICC[C]. Istanbul,Turkey, 2006. 2388-2393.
[7]	BRAUCKHOFF D , DIMITROPOULOS X , WAGNER A ,et al. Anomaly extraction in backbone networks using association rules[A]. SIGCOMM[C]. Chicago,Illinois,USA, 2009. 28-34.
[8]	YAN H , FLAVEL A , GE Z ,et al. Argus:end-to-end service anomaly detection and localization from an ISP's point of view[A]. INFOCOM[C]. Orlando,FL,USA, 2012. 2756-2760.
[9]	HSIAO S W , SUN Y S , CHEN M C ,et al. Behavior profiling for robust anomaly detection[A]. WCNIS[C]. Beijing,China, 2010. 465-471.
[10]	QIN T , GUAN X , LI W ,et al. Monitoring abnormal network traffic based on blind source separation approach[J]. Journal of Network and Computer Applications, 2011,34(5): 1732-1742.
[11]	ZIVIANI A , GOMES A T A , MONSORES M L ,et al. Network anomaly detection using nonextensive entropy[J]. IEEE Communications Letters, 2007,11(12): 1034-1036.
[12]	BARFORD P , DUFFIELD N , RON A ,et al. Network performance anomaly detection and localization[A]. INFOCOM[C]. Rio de Janeiro,Brazil, 2009. 1377-1385
[13]	SHANNON C E . A mathematical theory of communication[J]. Bell System Technical Journal, 1948,27(3): 379-423.
[14]	Cisco netflow[EB/OL]. , 2013.

Metrics

Recommended 0

No Suggested Reading articles found!

[1]	Shiqi ZHAO, Xiaohong HUANG, Zhigang ZHONG. Research and implementation of reputation-based inter-domain routing selection mechanism [J]. Journal on Communications, 2023, 44(6): 47-56.
[2]	Yi GUO, Yiqing WANG, Yuanyuan FAN, Gang LIU. OFDM transmission scheme with subcarrier supply index modulation [J]. Journal on Communications, 2023, 44(2): 104-111.
[3]	Haiyan KANG, Molan LONG. Research on network attack analysis method based on attack graph of absorbing Markov chain [J]. Journal on Communications, 2023, 44(2): 122-135.
[4]	Hua YANG, Yu WANG, Siyuan XU, Guoping JIANG. Time hopping short reference carrier index differential chaos shift keying communication scheme [J]. Journal on Communications, 2022, 43(3): 113-123.
[5]	Xiaodong FU, Xinxin QI, Li LIU, Wei PENG, Jiaman DING, Fei DAI. Detecting and preventing collusion attack in DPoS based on power index [J]. Journal on Communications, 2022, 43(12): 123-133.
[6]	Hongbin ZHANG, Yan YIN, Dongmei ZHAO, Bin LIU. Network security situational awareness model based on threat intelligence [J]. Journal on Communications, 2021, 42(6): 182-194.
[7]	Tengfei ZHANG, Shunzheng YU. Research prospects of user information detection from encrypted traffic of mobile devices [J]. Journal on Communications, 2021, 42(2): 154-167.
[8]	Dong CUI, Qiaoyan WEN, Hua ZHANG, Huawei WANG. QML: a hybrid spatial index structure [J]. Journal on Communications, 2021, 42(12): 1-16.
[9]	Xu CHENG, Yingying WANG, Nianjie ZHANG, Zhangjie FU, Beijing CHEN, Guoying ZHAO. Multi-level loss object tracking adversarial attack method based on spatial perception [J]. Journal on Communications, 2021, 42(11): 242-254.
[10]	Tao HUANG, Jiang LIU, Shuo WANG, Chen ZHANG, Yunjie LIU. Survey of the future network technology and trend [J]. Journal on Communications, 2021, 42(1): 130-150.
[11]	Zhiyong LUO,Xu YANG,Jiahui LIU,Rui XU. Network intrusion intention analysis model based on Bayesian attack graph [J]. Journal on Communications, 2020, 41(9): 160-169.
[12]	Hongyan WANG,Tuo WANG,Mian PAN,Zumin WANG. Gamma norm minimization based image denoising algorithm [J]. Journal on Communications, 2020, 41(10): 222-234.
[13]	Hanxun ZHOU,Chen CHEN,Runze FENG,Junkun XIONG,Hong PAN,Wei GUO. Mobile malware traffic detection approach based on value-derivative GRU [J]. Journal on Communications, 2020, 41(1): 102-113.
[14]	Shunqin XIE,Ke ZHOU,Dahai CHEN,Xianglu LI,Sheng ZHONG,Jian ZHANG. Reduced phase-state detection based on virtual modulation indexes for Multi-h CPM [J]. Journal on Communications, 2019, 40(9): 45-50.
[15]	JIANG Lyu,ZHANG Hengwei,WANG Jindong. Optimal strategy selection method for moving target defense based on signaling game [J]. Journal on Communications, 2019, 40(6): 128-137.

Transductive quantitative calculation approach of network abnormality index

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 6

References 14

Related Articles 15

Metrics

Recommended 0