Real-time attacks blind detection and analysis algorithm of mobile internet network

• Main Authors: Shi Erying, Wang Zheng
• Format: Article
• Language: zho
• Published: National Computer System Engineering Research Institute of China 2018-03-01
• Series: Dianzi Jishu Yingyong
• Subjects: mobile internet network; attack detection; network safety; model order selection; distributed denial of service; port scan attack
• Online Access: http://www.chinaaet.com/article/3000079315

Attack detection algorithms of large scale mobile internet network need the prior information of attack behaviors or supervised learning to attack behaviors, so these algorithms is not real time and applicable, a real-time attacks blind detection and analysis algorithm of mobile internet network is proposed to handle that problems. Firstly, the largest eigenvalues for all time frames are extracted, the attack behaviors of each time frame are detected by analysis combined largest eigenvalues with model order. Then, the types of detections are analyzed by eigenvalues analysis technique, and the variations details of the eigenvalues are identified. Lastly, similarity analysis schema are designed to analyze the detail information, such as port count and time. Simulation results based on the real experiment and public network traffic dataset show that the proposed algorithm realizes a good attack detection accuracy.