DDos attack detection method based on concentric axis multidimensional data visualization model

Abstract

The invention belongs to the network security visualization field, and relates to a DDos attack detection method based on a concentric axis multidimensional data visualization model. The method comprises the following steps: extracting a source IP address, a target IP address and a target port number from original network data, and taking the source IP address, the target IP address and the target port number as three dimensions of a visualization model; creating the concentric shaft multidimensional data visualization model, and mapping the source IP address, the target IP address and the target port number on three axes of the concentric axis from the inside out; adjusting a reference axis and curve spatial distribution by employing an interaction method of radial distortion and angle distortion of 'focus + background environment ' to display a detail of a concentric axis multidimensional data visualization graph more clearly; analyzing whether a target is attacked or not according to an obtained concentric axis graph characteristic and a DDos characteristic. According to the invention, a clear, identifiable, controllable visualization result is provided for network analysis personnel, and a possibility of discovering the DDos attack by the network analysis personnel is raised.

Description

technical field [0001] The invention belongs to the field of network security visualization and relates to a method for detecting DDos attacks based on a concentric axis multi-dimensional data visualization algorithm. Background technique [0002] DDoS is a special form of denial-of-service attack based on DoS. It is a distributed and coordinated large-scale attack method. The main targets are relatively large sites, such as corporate websites, search engines, and government departments. A basic DoS attack can be realized as long as a single machine that can connect to the Internet is needed, while a DDoS attack uses a group of controlled machines to launch an attack on a single machine, which is relatively destructive. [0003] Information visualization technology is based on the modern information processing platform, according to the needs of users for information, using appropriate visual symbols to represent various information and the internal and external relations ...

AI Technical Summary

Problems solved by technology

However, in the previous research and development models, in the network security visualization model, there will be limited representation dimensions, or when the amount of data is too large, the line segments are intertwined and cannot be distinguished, which has a great impact on the detection of network security status. influences

Images