多接口非限制下组件化手机Web前端会话劫持攻击检测方法研究

发布时间：2018-02-04 23:16

本文关键词： 多接口非限制组件化手机 Web前端会话劫持攻击检测　出处：《科学技术与工程》2017年07期 　论文类型：期刊论文

【摘要】：多接口非限制下组件化手机的Web前端容易遭遇会话劫持攻击。当前会话劫持攻击检测方法需建一个含有全部攻击特征的检测模型,不易实现,且检测结果不可靠。提出一种新型组件化手机Web前端会话劫持攻击检测方法,分析多接口非限制下组件化手机Web前端会话劫持攻击,预处理RTT历史数据,以降低多接口非限制下组件化手机Web前端奇异数据对正常数据RTT特征提取的影响。采用滑动数据窗和最小二乘平滑结合的方法对组件化手机Web前端正常数据的RTT特征进行提取,依据RTT特征提取结果,通过滑动窗口平均方法对会话劫持攻击进行检测。实验结果表明,所提方法具有很高的攻击检测精度和效率。
[Abstract]:The Web front-end of non-limited multi-interface mobile phone is vulnerable to session hijacking attacks. The current detection method of session hijacking attack needs to build a detection model with all attack characteristics, which is not easy to implement. And the detection results are not reliable. This paper proposes a new detection method of Web front-end session hijacking attack of component mobile phone, and analyzes the multi-interface non-limited Web front-end session hijacking attack of mobile phone. Preprocess RTT history data. In order to reduce the influence of the singular data of the Web front-end of the component-based mobile phone on the RTT feature extraction of the normal data under the condition of multi-interface and non-restriction, the sliding data window and the least square smoothing method are used for the Web front-end of the component-based mobile phone. The RTT features of normal data are extracted. Based on the RTT feature extraction results, a sliding window averaging method is used to detect the session hijacking attacks. The experimental results show that the proposed method has high detection accuracy and efficiency.
【作者单位】：长春工业大学人文信息学院;
【基金】：民办高校教师工作量及津贴管理平台研发吉高学会[2015]7号(JGJX2015D338)资助
【分类号】：TP393.08
【正文快照】： 研发吉高学会[2015]7号(JGJX2015D338)资助引用格式:李洪亮.多接口非限制下组件化手机Web前端会话劫持攻击检测方法研究[J].科学技术与工程,2017,17(7):90—94Li Hongliang.More interface modular mobile Web front-end not under thelimit session hijacking attack detecti

【参考文献】