Recent investigations into proactive network defense have not produced a systematic methodology and structure; in addition, issues including multi-source information fusion and attacking behavior analysis have not been resolved. Borrowing ideas of danger sensing and immune response from danger theory, a proactive network defense model based on danger theory is proposed. This paper defines the signals and antigens in the network environment as well as attacking behavior analysis algorithm, providing evidence for future proactive defense strategy selection. The results of preliminary simulations demonstrate that this model can sense the onset of varied network attacks and corresponding endangered intensities, which help to understand the attack methods of hackers and assess the security situation of the current network, thus a better proactive defense strategy can be deployed. Moreover, this model possesses good robustness and accuracy.
Publié le : 2016-03-01
Classification:  Computer Architectures and Networking,  Network security, danger theory, proactive defense model, attacking behavior analysis, real-time awareness
@article{cai1141,
     author = {Yu Wang and Zhenxing Wang; National Digital Switching System Engineering and Technological Research Center, 450000 Zhengzhou and Liancheng Zhang; National Digital Switching System Engineering and Technological Research Center, 450000 Zhengzhou and Yazhou Kong; National Digital Switching System Engineering and Technological Research Center, 450000 Zhengzhou},
     title = {Network Proactive Defense Model Based on Immune Danger Theory},
     journal = {Computing and Informatics},
     volume = {34},
     number = {4},
     year = {2016},
     language = {en},
     url = {http://dml.mathdoc.fr/item/cai1141}
}
Yu Wang; Zhenxing Wang; National Digital Switching System Engineering and Technological Research Center, 450000 Zhengzhou; Liancheng Zhang; National Digital Switching System Engineering and Technological Research Center, 450000 Zhengzhou; Yazhou Kong; National Digital Switching System Engineering and Technological Research Center, 450000 Zhengzhou. Network Proactive Defense Model Based on Immune Danger Theory. Computing and Informatics, Tome 34 (2016) no. 4, . http://gdmltest.u-ga.fr/item/cai1141/