摘要
通过对入侵检测中模糊技术应用和移动模糊推理方法的研究,设计并实现了基于移动模糊推理的DoS攻击入侵检测系统.首先,描述了移动模糊推理方法与模糊推理步骤;其次,详细阐述了用时间差与IP地址分布变化的DoS攻击检测方法与基于移动模糊推理的攻击检测系统,创建了用于检测的模糊规则,确定网络攻击.最后,把DoS攻击工具与DARPA 98数据集作为入侵检测数据集,对基于移动模糊推理的方法与现行方法进行测试,验证了所提方法的有效性.
According to the study of the application of fuzzy technique in the intrusion detection and removal fuzzy reasoning method, the DoS attack intrusion detection system was designed and realized on the basis of removal fuzzy reasoning method. Firstly, the removal fuzzy reasoning method and fuzzy reasoning step were described. Then, DoS attack detection method using the interval and the IP address distribution change was described and so was the detection system based on removal fuzzy reasoning. The fuzzy rules for detection were made to determine network attack. Finally, the validity of the proposed method was checked by testing the method based on the removal fuzzy reasoning and the existing method with DoS attack tool and DARPA 98 dataset as intrusion detection dataset.
出处
《东北大学学报(自然科学版)》
EI
CAS
CSCD
北大核心
2012年第10期1394-1398,共5页
Journal of Northeastern University(Natural Science)
基金
国家自然科学基金资助项目(60970157)
辽宁省博士启动基金资助项目(2081019)
关键词
网络
模糊推理
入侵检测
DOS攻击检测
异常检测
network
fuzzy reasoning
intrusion detection
DoS attack detection
anomaly detection