基于阶段特性的APT攻击行为分类与评估方法

发布时间：2018-04-08 12:37

本文选题：高级可持续性(APT)攻击　切入点：攻击检测　出处：《计算机工程与应用》2017年22期

【摘要】：APT攻击行为的复杂多样性增加了攻击检测的难度,这也正是当前APT攻击研究的难点之一。基于现有研究,提出基于阶段特性的APT攻击行为分类与评估方法。通过学习理解APT攻击的概念,对APT攻击的阶段特征进行总结;以各攻击阶段的目的为依据,对APT攻击行为进行细粒度划分,形成APT攻击行为分类框架;基于各类攻击行为的特点,提取影响APT攻击性能的关键因素,设计相应的量化评估方法,为攻击行为的选取与检测提供指导。通过对实验结果进行分析,所提方法能够真实地反映攻击的实际情况,具有较好的有效性和准确性。
[Abstract]:The complexity and diversity of APT attack behavior increase the difficulty of attack detection, which is one of the difficulties in the research of APT attack.Based on the existing research, a method for classification and evaluation of APT attack behavior based on stage characteristics is proposed.By studying and understanding the concept of APT attack, summarizing the stage characteristics of APT attack, according to the purpose of each attack stage, classifying the APT attack behavior into fine granularity, forming the APT attack behavior classification framework.Based on the characteristics of all kinds of attacks, the key factors affecting the performance of APT attacks are extracted, and the corresponding quantitative evaluation methods are designed to provide guidance for the selection and detection of attack behaviors.By analyzing the experimental results, the proposed method can truly reflect the actual situation of the attack, and has good effectiveness and accuracy.
【作者单位】：信息工程大学;
【基金】：国家自然科学基金(No.61303074,No.61309013) 国家重点基础研究发展计划(“973”计划)(No.2012CB315900)
【分类号】：TP393.08

【相似文献】