一种基于信用的综合蠕虫检测算法.pdfVIP

第 42 卷 第 4 期 电 子 科 技 大 学 学 报 Vol.42 No.4 2013 7 Journal of University of Electronic Science and Technology of China Jul. 2013 年 月 一种基于信用的综合蠕虫检测算法 杨宏宇，米耘锋 (中国民航大学计算机科学与技术学院 天津 东丽区 300300) 【摘要】提出一种基于信用的综合蠕虫检测算法(CBCWD) 。首先，通过检测对比实验对连接成功概率参数进行优化设定； 其次，在对基于信用的连接率限制算法响应策略进行了重新设计，以此为基础对该算法的响应处理过程进行了改进。在上述 研究基础上，设计一种基于信用的综合蠕虫检测算法。该算法通过监测网络流量信息，对监测事件执行响应策略，通过攻击 NUST 2011 5 条件判定和综合分析得出检测结果。采用 开放数据集进行 种不同频率的攻击检测对比实验，实验结果表明该算法 具有更高的检测率和更低的误报率。 关 键 词 信用; 数据集; 检测; 连续假设检验; 蠕虫扫描 中图分类号 TP309; TP393.08 文献标志码 A doi:10.3969/j.issn.1001-0548.2013.04.008 A Credit-Based Comprehensive Worm Detection Algorithm YANG Hong-yu and MI Yun-feng (School of Computer Science and Technology, Civil Aviation University of China Dongli Tianjin 300300) Abstract This paper presents a new comprehensive worm detection algorithm based on credit. Firstly, the parameters of connection success probability are optimized and set through detection contrast experiments. Secondly, the response strategy of the credit-based connection rate limiting algorithm is redesigned, and consequently the event response process of the algorithm is improved. On the basis of the above study, the new credit-based comprehensive worm detection (CBCWD) algorithm is designed to monitor network traffics, execute response strategy for monitoring events, and give the detection results through attack condition judge and comprehensive analysis. Five different frequencies attacks detection experiments on the NUST 2011 open dataset were conducted. The experiment results demonstrate that proposed algor