| 基于网络入侵检测的入侵者定位系统 |
| |
| 引用本文： | 李小勇,刘东喜,谷大武,白英彩.基于网络入侵检测的入侵者定位系统[J].上海交通大学学报,2004,38(4):533-536. |
| |
| 作者姓名： | 李小勇 刘东喜 谷大武 白英彩 |
| |
| 作者单位： | 上海交通大学,信息安全学院,上海,200030 |
| |
| 基金项目： | 国家高技术研究发展计划(863)项目(2001AA144060.2) |
| |
| 摘 要： | 提出并实现了一个基于网络入侵检测的入侵者定位系统．该系统利用分布在网络内的多个网络检测器检测网络攻击，并提取攻击指纹信息，由中央分析器对指纹信息进行相关性分析，构造攻击路径，从而得到入侵者的网络地址．和已有各种方法相比，该系统有更好的准确性、可扩展性和实时性，可有效地解决可控网络环境下的间接攻击问题．
|
| 关 键 词： | 网络安全 入侵者定位系统 入侵检测 |
| 文章编号： | 1006-2467(2004)04-0533-04 |
| 修稿时间： | 2003年3月14日 |
An Intruder Locating System Based on Network Intrusion Detection |
| |
| LI Xiao-yong,LIU Dong-xi,GU Da-wu,BAI Ying-cai.An Intruder Locating System Based on Network Intrusion Detection[J].Journal of Shanghai Jiaotong University,2004,38(4):533-536. |
| |
| Authors: | LI Xiao-yong LIU Dong-xi GU Da-wu BAI Ying-cai |
| |
| Abstract: | Indirect attack is one of the important means used by network attackers to conceal themselves. This paper presented an intruder locating system based on network intrusion detection, which can trace back the indirect attack in controlled network environment. The sensors distributed in network detect attacks, gather attack fingerprint and then send alarm information to the central analyzer, which correlates alarm information and constructs attack path to decide the intruder's origin network address. Compared with the other systems available, this system is more accurate, scalable and can trace back intruder's address in real time. |
| |
| Keywords: | network security intruder locating system intrusion detection |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
