节点文献
基于攻击描述语言的IDS基准测试技术研究
Research on Technology of IDS Benchmark Test Based on Attack Description Language
【摘要】 从最早利用协议分析仪发送攻击特征,采用黑客工具,到网络攻击数据的录播重放,IDS测试方法和工具随着入侵检测技术和网络攻击的发展而不断发展。论文提出了一种新的基准测试技术,它基于全新设计的网络攻击描述语言,对各种网络攻击进行统一规范的描述形成测试脚本库,然后通过模拟攻击机和牺牲主机的一体化结构,产生各种网络攻击会话,从而达到测试的目的。
【Abstract】 From sending signatures,using hacking tools,to replaying the traffics of network attacks,the methodologies and tools of IDS test are developing along with the developing of intrusion detection and hacking.This paper proposes a new approach for IDS benchmark test,which is based on a new network attack description language.This approach can descript all the network attack activities in an unified way to form the database of test scripts.Furthermore,based on the united architecture simulating attack host and sacrificed host,it realizes the real creation of network attack sessions.
【Key words】 Intrusion Detection System; benchmark test; attack description language; united architecture;
- 【文献出处】 计算机工程与应用 ,Computer Engineering and Applications , 编辑部邮箱 ,2005年33期
- 【分类号】TP393.08
- 【被引频次】5
- 【下载频次】126