基于攻击效用的复合攻击预测方法

复合攻击已经成为网络攻击的主要形式之一，入侵检测系统仅能检测到攻击，但不能预测攻击者下一步的攻击。分析了传统攻击预测方法的不足，提出了一种基于攻击效用的复合攻击预测方法，以攻击者追求利益最大化的原则，为每种攻击分配一个攻击效用，在此基础上进行攻击预测，识别攻击者的最终意图和预测其下一步将要进行的攻击。通过实验验证了该方法的有效性。

Forecast Algorithm for Multi-step Attack based on Attack Utility

The multi-step attack is one of the primary forms of the net attack.Intrusion detection system only detects attack,but cannot forecast next step attack.An approach to forecast attack based attack utility is presented after analyzing the traditional approaches to forecast attack.To recognize the attacker's final intention and forecast next possible attack based on attack utility is distributed to each attack in accordance with the principle of maximizing the benefits by the attacker.Experiment proves the val...