【摘要】 提出一种面向应用层目标的主动防御系统,管理者可以使用以应用层目标为核心的描述语言,体现自身的防御目的.该系统可以在发生网络入侵的情况下,依照网络态势和网管所关注的应用层目标,自动生成网络安全防御方案,并采用多属性决策评估技术对众多方案实现评估优选.实验结果显示:该系统可以快速地实现防御目标到具体方案的转换,同时也可以根据网络中态势变换自动调整防御方案,从众多防御方案中选择较优的结果实施主动防御.更多还原

【Abstract】 An active defense system for application layer target was proposed,and the manage can use the language to describe the intention which is for the defense of the application target.When the intrusion event happened,system make the defense scheme automatically from the network situation and application layer target which is from the network manager,it also use multi-attribute decision to select the best scheme from all the schemes.In the experiments,the results show that this system can transfer the defense intent to defense schemes activity.When the network situation changes,the system can adopt the scheme stilly based on these change and evaluate the best one to finish the security active defense.更多还原