时变环境下的DoS网络攻击频谱检测方法仿真

Spectrum Sensing Method for Do S Network Attack under Time-Varying Environment

时变Do S攻击是当前新出现的一种攻击形式,与非时变网络攻击不同,时变环境下的Do S网络攻击特征频谱处在大幅动态变化中,会造成用于检测攻击频谱处在不可控区间的波动中,无法形成区域内稳定的网络攻击频谱特征。传统的Do S攻击频谱检测方法,多是以检测非时变攻击频率特征为主,对时变攻击无法获取稳定的攻击频谱数据特征,检测的准确性一直较低。提出一种采用包络延拓和本征波匹配的时变Do S攻击频谱检测方法,通过时变Do S攻击频谱信号边界波与内部波之间的本征波匹配性对信号边界进行处理,采用AR模型完成所有时变Do S攻击频谱信号极值点之间上下包络的估测以及延伸,实现Do S攻击频谱的估测,通过时变Do S攻击前后随机序列统计均值的变化对估测到的Do S频谱进行检测。仿真结果表明,采用所提方法对时变Do S攻击频谱进行检测不仅检测率高,而且耗能低。

Time - varying DoS attack is the newly emerging attack mode. Unlike time - invariant network attack, the feature spectrum of DoS network attack under time - varying environment in sharply dynamic change, will cause that the detected attack spectrum is in the position of fluctuations in the uncontrolled range ,which is not able to form stable features of network attack spectrum in the region. A spectrum sensing method for time - varying DoS attack based on envelope continuation and eigen wave matching was proposed. The eigen wave matching feature between boundary wave and internal wave of time - varying DoS attack spectrum signal was used to make processing for the boundary of signal. The AR model was applied to complete the estimation and extension for the upper and lower enve- lopes between the extreme value points of all time - varying DoS attack spectrum signals, so as to achieve the estima- tion of DoS attack spectrum. According to the statistical average changes of the random sequences before and after the time - varying DoS attack, the estimated DoS spectrum can be detected. The simulation results show that the detection rate is high, and the consumption is low.