面向移动互联网的多步攻击安全可视化研究

项目名称： 面向移动互联网的多步攻击安全可视化研究

项目编号： No.61303231

项目类型： 青年科学基金项目

立项/批准年度： 2014

项目学科： 自动化技术、计算机技术

项目作者： 努尔布力

作者单位： 新疆大学

项目金额： 23万元

中文摘要： 移动互联网的广泛应用，为人们的生活带来便利的同时，也对民众个人信息和网络安全带来了巨大的威胁。网络多步攻击因其攻击方式多样、攻击过程复杂并且难以检测，成为网络安全人员的关注焦点，安全可视化是研究网络攻击的方法之一。本项目研究移动互联网环境下的网络多步攻击信息可视化和知识可视化方法。通过移动互联网环境下的典型攻击的仿真，构建这一环境下的典型多步攻击数据集，实现多步攻击数据的信息可视化呈现；在对多步攻击关键步骤的分析和抽取基础上，研究攻击关键步骤的知识可视化特征，从而形成以关键步骤呈现为基础的多步攻击过程知识可视化框架；在可视化的基础上，对获取的攻击数据集进行可视化特征标注，形成该领域内具有一定规范性的数据集。本项目的研究，为进一步开展基于安全可视化的网络多步攻击分析系统、以及结合安全可视化进行多步攻击预测等方面的研究奠定基础。

中文关键词： 多步攻击；安全可视化；入侵检测；；

英文摘要： The widely used Mobile Internet has brought convenience in our lives, but at the same time, it cause more threats in private information and internet security. Since network multi-stage attacks have diversity attack methods, complex attack process,and hard to discover, these attacks have been the focus of network security managers, and security visualization is one of the methods in network multi-stage attack researches. In this projects, information visualization and knowledge visualization of network multi-stage attacks under mobile internet will be analyzed. For the first, we construct a simulation environment of mobile internet, and simulate the typical multi-stage attacks, in order to get the attack data sets,and based on the data set, implement the information visualization of multi-stage attacks. For the second, based on the analyses and extraction of attack's key stages, we study on the visualization features of this stages, then come to the multi-stage attack knowledge visualization based on key stages. Thirdly, based on visualization, we mark the data sets with visualization features, and construct standardized marked data sets in this fields.The researches of this project will make the foundations of further researches on network multi-stage attack analyze systems and prediction of attack intensions

英文关键词： multi-stage attack；security visualization；intrusion detection；；