【摘要】 针对网络攻击隐蔽性、不确定性等导致的网络攻击溯源难的问题,提出一种基于电子指纹的网络攻击溯源技术。设计数据的电子指纹,结合网络攻击信息,构建原生网络攻击路径,通过数据相似性、同源性分析,完成对原生网络攻击路径的重构,分辨出确定和可疑的网络攻击路径,分析数据的交互关系,预测即将受影响的数据。实验结果表明,该技术能够有效实现数据级、全过程的网络攻击溯源以及预测攻击的影响范围。更多还原

【Abstract】 Aiming at the difficulty of tracing the source of network attacks caused by the concealment and uncertainty of network attacks,a network attack source technology based on electronic fingerprint was proposed.Electronic fingerprints were designed,the network attack information was combined to build a primeval network attack path,through analysis data similarity and homology,the reconstruction of the attack path of the primeval network was completed,the specific and suspicious network attack path was recognized,and the source of the network attack was located.The data relationship was analyzed and the data that would be affected were predicted.Experimental results show that the proposed technology can effectively achieve data-level and full-process network attack tracing and predict the scope of attack.更多还原