网络攻击追踪方法的模型构想

Model Conception for Network Attacker-Tracing System

分析了IP地址追踪方法,结合现有的入侵检测技术提出了网络攻击源追踪系统的模型,阐述了该系统的体系结构和各部分的主要功能,给出了利用相关性分析对攻击者的攻击路径进行回溯的基本思想,对网络安全管理具有一定的借鉴意义。

On the basis of the existing intrusion detection techniques, this paper analyses the tracing network attack method and presents a model of network attacker-tracing system, and expatiates on the system structure and the principal functions of all parts. By using of the relevant analysis, a basic idea of retracing the attackers＇ paths is given, which shares certain reference value for network security management