基于移动模糊推理的DoS攻击检测方法

通过对入侵检测中模糊技术应用和移动模糊推理方法的研究,设计并实现了基于移动模糊推理的DoS攻击入侵检测系统.首先,描述了移动模糊推理方法与模糊推理步骤;其次,详细阐述了用时间差与IP地址分布变化的DoS攻击检测方法与基于移动模糊推理的攻击检测系统,创建了用于检测的模糊规则,确定网络攻击.最后,把DoS攻击工具与DARPA 98数据集作为入侵检测数据集,对基于移动模糊推理的方法与现行方法进行测试,验证了所提方法的有效性.

DoS Attack Detection Method Based on Removal Fuzzy Reasoning

According to the study of the application of fuzzy technique in the intrusion detection and removal fuzzy reasoning method, the DoS attack intrusion detection system was designed and realized on the basis of removal fuzzy reasoning method. Firstly, the removal fuzzy reasoning method and fuzzy reasoning step were described. Then, DoS attack detection method using the interval and the IP address distribution change was described and so was the detection system based on removal fuzzy reasoning. The fuzzy rules for detection were made to determine network attack. Finally, the validity of the proposed method was checked by testing the method based on the removal fuzzy reasoning and the existing method with DoS attack tool and DARPA 98 dataset as intrusion detection dataset.