A router abnormal traffic detection strategy based on active defense. Issue 1 (January 2021)

• Record Type: Journal Article
• Authors: Li, Xin; Yi, Peng; Jiang, Yiming; Yu, Jing
• Is Part Of: Journal of physics. Volume 1738:Issue 1(2021)
• Publication Date: 2021-01
• Subjects: Physics -- Congresses; 530.5
• DOI: 10.1088/1742-6596/1738/1/012103
• Languages: English
• ISSNs: 1742-6588

Abstract

Abstract: With the rapid development of network attacks, traditional security protection technology is difficult to deal with unknown threats and persistent attacks. Active defense improves the ability to defend against network attacks by building a dynamic, heterogeneous and redundant endogenous security system. Aiming at the problem of single abnormal arbitrament information of routers in mimic defense, a router abnormal traffic detection strategy based on active defense is proposed. By clustering the traffic information of multiple heterogeneous redundant routing function entities and comparing the distance measurement between them, the routing function entities in abnormal state are determined. The experimental results show that the proposed strategy effectively detects the security threats of routing functional entities and expand the method of mimic router arbitrament.