摘要
对网络高密度入侵频率的监测,能够有效提高移动网络安全防护效果。在网络安全防护中对高密度入侵频率的监测,需要对入侵频率监测最短路径进行定量分析,通过维特比算法修正监测结果,完成高密度入侵频率的高精度监测。传统方法入侵告警映射识别已发生的安全防护,依据入侵攻击者能力等级调监测分布,但忽略了对监测结果的修正,导致监测精度偏低。提出基于改进隐马尔科夫模型的网络防护下高密度入侵频率监测方法。采用网络异常入侵攻击路径图对入侵意图可达性、实现几率以及监测最短路径进行定量分析。利用修正的概率计算方法降低高密度入侵频率监测误差,对于入侵告警信息时间序列中存在的误报情况,采用维特比算法通过添加一个判决门限对存在误报情况下的高密度入侵频率监测结果进行修正。实验结果表明,所提方法相比当前监测方法有效提高了高密度入侵频率监测的准确性。
To monitor high -density intrusion frequency can effectively improve the effect of protecting security of mobile network. In traditional methods, the correction of monitoring result is ignored, which leads to low monitoring accuracy. Therefore, this paper proposed a method to monitor high - density intrusion frequency in network protection based on improved hidden Markov model. We used the route map of network anomaly intrusion attack to quantitatively analyze the accessibility of intrusion intention, the implementation probability and the shortest path. Then, we used the modified probability method to reduce the error of high - density intrusion frequency monitoring. For the misinformation in time series of intrusion alarm information, the viterbi algorithm after adding a decision threshold was used to modify the monitoring result of high - density intrusion frequency in the case of misinformation. Simulation resuhs show that the proposed method effectively improves the accuracy of monitoring high - density intrusion frequency.
作者
王勇杰
张铁宝
WANG Yong - jie, ZHANG Tie - bao(Business College, Shanxi University, Taiyuan Shanxi 030031, China)
出处
《计算机仿真》
北大核心
2018年第10期321-324,共4页
Computer Simulation
基金
山西省教育科技规划项目基金(GH-15089)
关键词
安全防护
高密度
入侵频率
监测方法
Safety protection
High - density
Intrusion frequency
Monitoring method