Study of network coordinated attack and its detecting mothod
Tan Hui-mintrol · Jisuanji gongcheng · 2004
Coordinated attack is composed of many dispersed behaviors,which have some temporal and spatial span. If these behaviors are observed separately, traditional IDS(Intrusion Detection System) can hardly find anything abnormal. The features and the components of coordinated attacks were analysed. The actions of coordinated attacks were divided into temporal actions and dimensional actions. With proper expressions of attacks, detection method applied in coordinated attacks was brought forward. Then, the characteristics and applied mode of this method were introduced in detail.