Advanced persistent threat(APT)attacks with complex organization,efficient planning and clear directivity are one of the main threats facing our country,and the trend of covert action and regular attack of APT organizations is becoming more and more obvious.In recent years,it has become more and more difficult for our country to master the main APT activities,which is not unrelated to the fact that APT organizations disappear their attacks into normal information services and network activities,and hide their attack traffic in normal communication traffic.The state in which this kind of highly concealed attack behavior is concealed is called dense state.How to detect dense state behavior and implement system confrontation is one of the bottleneck problems to be solved in the current cyber space defense.From the perspective of clarifying the mechanism of traffic transmission hiding technology for advanced attack activities in cyberspace,this paper puts forward a research framework and countermeasure capability evaluation index system of traffic dense disappearing countermeasure based on two dimensions of anonymous communication link construction and traffic characteristic behavior detection,and comprehensively expounds the relevant research progress,research methods and solutions in recent years.In order to explore the new development direction of dense state countermeasure capability in cyberspace.
维普
万方数据
