A Network Intrusion Detection Algorithm Based on FSA Model

DOI

10.2991/icmmct-16.2016.122How to use a DOI?

Keywords

Intrusion detection, Finite state automaton, Protocol analysis technology, State transition diagrams, Session list.

Abstract

At present network attack technology is constantly updated,which bring network security workers huge challenges. In view of the fact that the existing intrusion detection technology is difficult to detect multi-step fragmentation attacks, distributed attacks and evading attacks,a network intrusion detection algorithm called FSA algorithm is proposed based on finite state automaton (FSA) model in this paper, and the key implementation technology is analyzed.The state transition diagram is used to illustrate the attack triggering and transfer process,and according to different protocol data,four different mechanisms are designed to detect invasion based on FSA.Experiments show that the algorithm not only can more precisely detect common attacks,but also can detect the unobvious attacks such as distributed and fragment attack very well,which can not be detected by other detection technologies.It is believe that it removes the limitations of the current intrusion detection technology and has an important research and practice value.

Copyright

© 2016, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Fei Wu
AU  - Donghui Wu
AU  - Yingen Yang
PY  - 2016/03
DA  - 2016/03
TI  - A Network Intrusion Detection Algorithm Based on FSA Model
BT  - Proceedings of the 2016 4th International Conference on Machinery, Materials and Computing Technology
PB  - Atlantis Press
SP  - 614
EP  - 620
SN  - 2352-5401
UR  - https://doi.org/10.2991/icmmct-16.2016.122
DO  - 10.2991/icmmct-16.2016.122
ID  - Wu2016/03
ER  -