摘要
网络入侵检测中,攻击的形式越来越多样化和复杂化,网络多步攻击成为当前攻击的主要形式.智能规划最早用于人工智能领域,将一个领域内的知识形成规划推理时的规划域,将待求解的问题对应于规划问题.将智能规划应用于多步攻击领域,用以对多步攻击进行识别,并以此为基础,提出一种基于知识表示的多步攻击规划问题描述模型,用以提供解决复杂网络攻击数据的形式化描述问题的一种探索.实验中规划问题采用PDDL语言进行描述,对所提模型进行可用性验证.
In network intrusion detection,the modes of attack are more and more complex and diversified.Network multistage attack has been the main form of current attack.Intelligent planning was used in artificial intelligence,makes the fields knowledge as planning domain,and the issues to be solved as planning problems.In this paper,intelligent planning was used in recognition of multi-stage attack,and based on this,a multi-stage planning problem recognize model was proposed,in order to provide an useful exploration of network attack data formal description.The model is described in PDDL,and evaluation shows the proposed model have well availability.
出处
《电子学报》
EI
CAS
CSCD
北大核心
2013年第6期1101-1107,共7页
Acta Electronica Sinica
基金
国家重点基础研究发展计划(973计划)(No.2009CB320706)
国家高技术研究发展计划(863计划)(No.2011AA010101)
国家自然科学基金(No.61073009
No.61163052)
吉林省重大科技攻关项目(No.2011ZDGG007)
长春市国际合作项目(No.11GH12)
新疆大学博士启动基金(No.BS110126)
关键词
多步攻击
智能规划
安全规划问题
PDDL
multi-stage attack
intelligent planning
security planning problem
PDDL