期刊文献+

一种基于概率的实时扫描检测方法

A Real-time Scan Detection Approach Based on Probability
下载PDF
导出
摘要 在对各种流行扫描方法分析的基础上,提出了一种基于概率的实时扫描检测方法(Real-time ScanDetection Approach Based on Probability,RSDABP)。该方法是一种后向扫描检测方法,具有低误报率、实时性和健壮性的优点,也存在着一定的局限性。文末给出了需要加以改进的方向。 After analyzing many different scanning methods, a Real-time Scan Detection Approach Based on Probability(RSDABP) is presented in this paper.This approach is a backward scan detection method. So it is lower mistaken, real-time and robust. At the same time,it also has some limitations. At the end of this paper, we propose the direction to improve it.
出处 《计算机应用研究》 CSCD 北大核心 2004年第1期109-111,共3页 Application Research of Computers
基金 国家"863"高科技发展计划基金资助项目"智能入侵检测与攻击预警系统"(2001AA142010)
关键词 实时 基于概率 入侵检测系统 后向扫描检测 Real-time Based on Probability IDS(Intrusion Detection System) Backward Scan Detection
  • 相关文献

参考文献6

  • 1[1]Stuart Staniford, et al. Practical Automated Detection of Stealthy Portscans[J]. Joural of Computer Security, 2002,10( 1/2): 105-136.
  • 2[2]C Leckie,R Kotagiri. A Probabilistic Approach to Detecting Network Scans [ C ]. Proceedings of the Eighth IEEE Network Operations and Management Symposium (NOMS 2002 ),Florence, Italy, 2002. 359-372.
  • 3[3]Roger Christopher. Port Scanning Techniques and the Defense Ag-ainst Them October 5,2001 [ EB/OL]. http://www. sans.org/rr/audit/port _ scan. php,2002-11-25.
  • 4[4]Brenden Claypool. Stealth Port Scanning Methods, v1. 4, 2002[EB/OL]. http://www. giac. org/practical/Brenden _ Claypool _ GSEC. doc, 2002- 1 1-25.
  • 5[5]Ofir Arkin. Network Scanning Techniques: Understanding how it is done, November, 1999 [ EB/OL]. http://www. sys-security.com/archive/papers/Network_ Scanning_ Techniques. pdf,2002-11-25.
  • 6[6]John Green, et al. Analysis Techniques for Detecting Coordinated Attacks and Probes[J] .TISC Insight,2001,2(18).

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部