Technology research of attack path identification based on immune intrusion detection
Zhang Feng-bi · Jisuanji yingyong yanjiu · 2014
This paper did a research regarding the immune intrusion detection system and the IP traceback. By deploying distributed immune intrusion detection and data packet mark,this paper utilized immune intrusion detection system to analysis network packet's characteristic in real time to instruct path marking technique dynamically,making path marking method adaptable to different characteristics of network data,rapidly recognized attack path,and provided the path information to the immune intrusion detection system with the regard to develop characteristics checker for attack path. Experiments show that this method can reconstruct the information of attack path very fast,and is better than the-state-of-art probabilistic packet marking algorithm in terms of the convergence efficiency and false alarm rate,can provide the information of attack path to immune intrusion detection system.