网络入侵行为模式研究

Study on the Network Intrusion Session Model

针对网络入侵行为模式进行分析,给出由图像函数定义的系统状态,包括主体和客体、主体和客体关系、保护设置和合法流矩阵,利用系统状态的所有直接和间接关系确定系统转换过程中行为模式的变化及其规则,在此基础上简单分析了"特洛伊木马"的检测方法.

The network intrusion session model is discussed in this paper. The system states are defined with image function including the subjects, objects, relations of the subject and object, preventing rules, and legal flow matrix. The transform and rules of the network intrusion session model is analyzed with the system states. On the basis of the above, the Trojan horse detection method is briefly discussed,in which the Trojan horse is an intrusion code with masquerading a legitimate program. 