基于关联分析的网络漏洞攻击智能检测方法

An Intelligent Detection Method of Network Vulnerability Attack Based on Correlation Analysis

由于传统方法在网络漏洞攻击智能检测应用中延迟时间较长,为此提出基于关联分析的网络漏洞攻击智能检测方法。通过在网络中安插扫描插件,全面扫描网络端口、数据库、操作系统、Web、安全基线、弱口令以及工控系统,并获取数据。利用异常数据传播规则提取异常数据,并利用关联分析技术分析异常数据,进而识别网络漏洞攻击。实验证明,该设计方法延迟时间短于传统方法,在网络漏洞攻击智能检测方面具有较好的应用前景。

Due to the long delay time of traditional methods in the application of intelligent detection of network vulnerability attacks,an intelligent detection method of network vulnerability attacks based on correlation analysis is proposed.By inserting scanning plug-ins in the network,comprehensively scan network ports,databases,operating systems,Web,security baselines,weak passwords and industrial control systems to obtain data.Use abnormal data propagation rules to extract abnormal data,and use correlation analysis technology to analyze abnormal data is analyzed to identify network vulnerability attacks.Experiments show that the delay time of the design method is shorter than that of the traditional method,and it has a good application prospect in the intelligent detection of network vulnerability attacks.