CAJ | 학술논문

提出了一种基于擦除痕迹追踪的网络恶意攻击取证技术，分析攻击擦除痕迹的相交性作为取证方案，依据网络恶意攻击的相交擦除痕迹构建贝叶斯报警网络，对恶意攻击进一步取证，并通过网络恶意攻击检测模型分析网络受到的恶意攻击状态，实现大规模网络恶意攻击擦除后的取证。实验结果表明，该方案具有良好的实践性，能够对网络恶意攻击进行准确地取证，具有较高的报警率和较低的误报率，取得了令人满意的结果。
제출료일충기우찰제흔적추종적망락악의공격취증기술，분석공격찰제흔적적상교성작위취증방안，의거망락악의공격적상교찰제흔적구건패협사보경망락，대악의공격진일보취증，병통과망락악의공격검측모형분석망락수도적악의공격상태，실현대규모망락악의공격찰제후적취증。실험결과표명，해방안구유량호적실천성，능구대망락악의공격진행준학지취증，구유교고적보경솔화교저적오보솔，취득료령인만의적결과。
proposes a malicious attacks based on intersection wipe traces of network forensics technology, analysis of pre-liminary evidence collection scheme based on intersection wipe traces, malicious attack based on network intersection wipe traces constructing bayesian alerting network, further evidence to malicious attack, and through the cloud computing network malicious network attack detection model analysis of malicious attacks, realize the cloud computing network ma-licious attack detection. The experimental results show that the scheme has good practicality, can carry on the accurate evidence to the network of malicious attacks, has the high alarm rate and lower false alarm rate, and achieved satisfactory results.