CAJ | 학술논문

对Web连续攻击信号进行单模式匹配抓取进而提高对攻击信号的检测能力，提出一种基于NET架构的Web连续攻击单模式匹配抓取算法，采用盲源分离算法高斯随机分布下对连续攻击信号进行自相关成分分析，通过时频伸缩信号在不同时间下的能量密度，对Web连续攻击信号进行正常和异常数据分离，对不同频段进行频率变尺度压缩，实现对高频特征和低频特征的分段处理。采用包络线进行平均值标记的方法，得到信号的状态空间固有模态函数差值分量，实现算法改进。实验结果表明，该算法能准确实现对NET构架下的Web连续攻击特征点的单模式匹配抓取，提高对Web连续攻击信号的检测能力，对NET构架下的Web连续攻击特征信号的准确抓取概率较高，在网络安全构架等领域具有较好的应用价值。
대Web련속공격신호진행단모식필배조취진이제고대공격신호적검측능력，제출일충기우NET가구적Web련속공격단모식필배조취산법，채용맹원분리산법고사수궤분포하대련속공격신호진행자상관성분분석，통과시빈신축신호재불동시간하적능량밀도，대Web련속공격신호진행정상화이상수거분리，대불동빈단진행빈솔변척도압축，실현대고빈특정화저빈특정적분단처리。채용포락선진행평균치표기적방법，득도신호적상태공간고유모태함수차치분량，실현산법개진。실험결과표명，해산법능준학실현대NET구가하적Web련속공격특정점적단모식필배조취，제고대Web련속공격신호적검측능력，대NET구가하적Web련속공격특정신호적준학조취개솔교고，재망락안전구가등영역구유교호적응용개치。
The Web continuous attack signals of single pattern matching and improve the detection ability to grab attack sig?nal, Web continuous attack single pattern matching grasping algorithm is proposed based on NET architecture, analyze au?tocorrelation component continuous attack signal based on blind source separation algorithm of Gauss random distribution, the time-frequency expansion signal at different times of the energy density, the Web continuous attack signal separation of normal and abnormal data, for different band frequency variable scale compression, realize sectional treatment on the char?acter of high frequency and low frequency characteristics. Using the envelope marking method to obtain the state space av?erage value, intrinsic mode function difference components of the signal, the improved algorithm is realized. The experimen?tal results show that, the algorithm can accurately realize single pattern matching to grab the NET under the frame of Web continuous attack feature point, improve the ability to detect the continuous attacks on Web signals, accurately grasp the high probability of NET under the frame of Web continuous attack of signal features, it has good application value in the network security framework and other fields.