大数据环境下威胁的协作式检测综述.pdfVIP

Vo 1. 43 No. 10 第 43 卷第10 期 计算机科学 2016 年 10 月 Computer Science Oct 2016 大数据环境下威胁的协作式检测综述 张俭鸽郭渊博马骏陈越 (信息工程大学数学工程与先进计算国家重点实验室 郑州 450001) 摘 要 恶意的不法分子采用直接或间接的方法攻击个人、机构、国家，从而使其遭受不同程度的威胁。此类信息的 形式多种多样，数据量巨大，而且需要被高速地处理。因此，首先对 5 种典型的协作式检测模型 Esper， Hadoop , Agi lis ， Storm 和 Spark 进行分析、比较，阐述不同模型所适用的网络环境;然后对网络环境中常用的攻击手段 DDoS， MITM， APT 进行分析，说明检测这些攻击适合采用的模型;最后给出威胁的协作式检测架构模型部署方案，该方案 包括发送和接收处理两个组件，并指出可根据实际需要进行不同模型的架构部署;特别池，给出了对等网络、分等级的 安全域网络、分层结构网络中架构模型的部署方案。 关键词 威胁，协作式检测，攻击，架构模型，大数据 中图法分类号 TN915.08 文献标识码 A 001 10. 11896/j. issn. 1002-137X. 2016. 10. 003 Review of Collaborative Detection of Threat in Big Data ZHANG Jian-ge GUO Yuan-bo MA Jun CHEN Yue (State Key Laboratory of Mathematical Engineering and Advanced Computing ,The PLA Information Engineering University ,Zhengzhou 450001 ,China) Abstract Some malicious and illegal persons take advantage of direct or indirect methods to attack some person ,organi zation and nation ,so that they suffer from different degrees of threats. The type of information is various ,volume of da ta is large and it needs to be processed at high speed. Therefore ,we firstly analyzed five typical collaborative detection models which are Esper model , Hadoop model , Agilis model , Storm model and Spark model. Moreover , we made com parison of them and expatiated the network environment for different models. Then ,we analyzed ∞mmon attack methods in the network which are DDoS attack ,MITM attack and APT attack ,and explained detection models for these attacks. Finally ,we provided