DDos attack detection method based on concentric axis multidimensional data visualization model

Abstract

The invention belongs to the network security visualization field, and relates to a DDos attack detection method based on a concentric axis multidimensional data visualization model. The method comprises the following steps: extracting a source IP address, a target IP address and a target port number from original network data, and taking the source IP address, the target IP address and the target port number as three dimensions of a visualization model; creating the concentric shaft multidimensional data visualization model, and mapping the source IP address, the target IP address and the target port number on three axes of the concentric axis from the inside out; adjusting a reference axis and curve spatial distribution by employing an interaction method of radial distortion and angle distortion of 'focus + background environment ' to display a detail of a concentric axis multidimensional data visualization graph more clearly; analyzing whether a target is attacked or not according to an obtained concentric axis graph characteristic and a DDos characteristic. According to the invention, a clear, identifiable, controllable visualization result is provided for network analysis personnel, and a possibility of discovering the DDos attack by the network analysis personnel is raised.

Description

Technical field [0001] The invention belongs to the field of network security visualization, and relates to a method for detecting DDos attacks based on a concentric axis multidimensional data visualization algorithm. Background technique [0002] DDoS is a special form of denial of service attack based on DoS. It is a distributed and coordinated large-scale attack method. The main target is relatively large sites, such as corporate sites, search engines, and government sites. A basic DoS attack can be achieved with only a single machine that can connect to the Internet. A DDoS attack uses a group of controlled machines to attack one machine, which is more destructive. [0003] Information visualization technology is based on a modern information processing platform. According to users’ needs for information, appropriate visualization symbols are used to express various information and the relationship between internal and external information, so that people can interact with in...

AI Technical Summary

Problems solved by technology

However, in the previous research and development models, in the network security visualization model, there will be limited representation dimensions, or when the amount of data is too large, the line segments are intertwined and cannot be distinguished, which has a great impact on the detection of network security status. influences

Images