CAJ | 학술논문

网络入侵检测中，攻击的形式越来越多样化和复杂化，网络多步攻击成为当前攻击的主要形式。智能规划最早用于人工智能领域，将一个领域内的知识形成规划推理时的规划域，将待求解的问题对应于规划问题。将智能规划应用于多步攻击领域，用以对多步攻击进行识别，并以此为基础，提出一种基于知识表示的多步攻击规划问题描述模型，用以提供解决复杂网络攻击数据的形式化描述问题的一种探索。实验中规划问题采用PDDL语言进行描述，对所提模型进行可用性验证。
망락입침검측중，공격적형식월래월다양화화복잡화，망락다보공격성위당전공격적주요형식。지능규화최조용우인공지능영역，장일개영역내적지식형성규화추리시적규화역，장대구해적문제대응우규화문제。장지능규화응용우다보공격영역，용이대다보공격진행식별，병이차위기출，제출일충기우지식표시적다보공격규화문제묘술모형，용이제공해결복잡망락공격수거적형식화묘술문제적일충탐색。실험중규화문제채용PDDL어언진행묘술，대소제모형진행가용성험증。
In network intrusion detection ,the modes of attack are more and more complex and diversified .Network multi-stage attack has been the main form of current attack .Intelligent planning was used in artificial intelligence ,makes the fields knowl-edge as planning domain ,and the issues to be solved as planning problems .In this paper ,intelligent planning was used in recognition of multi-stage attack ,and based on this ,a multi-stage planning problem recognize model was proposed ,in order to provide an useful exploration of network attack data formal description .The model is described in PDDL ,and evaluation shows the proposed model have well availability .