Detection of Back Attack based on Interval Temporal Logic

Abstract

Contrasted with other detection methods, based on temporal logic the intrusion detection method can deal with complex network attacks actively. However, due to the lack of network attacks temporal logic formula, common back attack cannot use the above methods of detection. Therefore, the Propositional Interval Temporal Logic (ITL) is used to establish temporal logic formulas for back attack. Firstly, the attack principle of back attack was analyzed. Secondly, the critical steps of the attack were break up into atomic actions and the atomic proposition was defined. Finally, the temporal logic formula for the attack was established based on the logical relationship between the atomic propositions. According to the principle of model checking, the obtained temporal logic formula can be used as the input for the model checker (intrusion detector). The automaton was utilized to model the log library as another input to the model checker. And the intrusion detection method for these three attacks was given. and it proved the validityof the novel method by some Simulation experiments