基于UML的攻击模式研究

黑客攻击持续增加的频率和复杂性使预防的难度越来越大。同时,多阶段攻击和协同攻击也越来越普遍。目前,关于攻击的大多数研究都集中于攻击的分类和攻击细节的分析上,仅靠这些还很难掌握攻击的本质。该文提出了攻击模式的概念,使用基于UML的攻击模式,描述了攻击的静态结构和动态行为。对一般攻击过程和具体攻击技术都做了较深入的分析,揭示了各个攻击步骤、攻击对象及各步骤相互间的本质联系。攻击模式对于多阶段攻击和协同攻击尤其适用。利用攻击模式,可以迅速地理解新型攻击,把握攻击的本质,从而提高入侵检测的准确性。

Studies on UML Based Attack Patterns

The increasing frequency and complexity of attacks make defenses more and more difficult.At the same time ,multi-stage and coordinated attacks become more and more common.At present ,most of research in the area of attacks has focused on classifying and categorizing attacks and the analysis of details of a specific attack.This is not enough for understanding the essence of attacks.This paper presents the concept of attack patterns and uses the UML based attack patterns to describe the static structures and dynamic activities of attacks.This paper also gives deep analysis of the general attack process and some specific attacks,disclosing the attack procedures,attack objects and the essential relations among them.Attack patterns are especially suitable for multi-stage and coordinated attacks.Using the attack pattern,new attacks and their essences can be understood quickly and the accuracy of intrusion detections can be improved.