一种基于知识表示的多步攻击规划问题描述模型

A Multi-Stage Attack Planning Problem Description Model Based on Knowledge Representation

网络入侵检测中,攻击的形式越来越多样化和复杂化,网络多步攻击成为当前攻击的主要形式.智能规划最早用于人工智能领域,将一个领域内的知识形成规划推理时的规划域,将待求解的问题对应于规划问题.将智能规划应用于多步攻击领域,用以对多步攻击进行识别,并以此为基础,提出一种基于知识表示的多步攻击规划问题描述模型,用以提供解决复杂网络攻击数据的形式化描述问题的一种探索.实验中规划问题采用PDDL语言进行描述,对所提模型进行可用性验证.

In network intrusion detection,the modes of attack are more and more complex and diversified.Network multistage attack has been the main form of current attack.Intelligent planning was used in artificial intelligence,makes the fields knowledge as planning domain,and the issues to be solved as planning problems.In this paper,intelligent planning was used in recognition of multi-stage attack,and based on this,a multi-stage planning problem recognize model was proposed,in order to provide an useful exploration of network attack data formal description.The model is described in PDDL,and evaluation shows the proposed model have well availability.