Research On Ontology-Based Byzantine Attacks Modeling And Detection

The extensive use of the Internet has brought a lot of network security problems which contributes to a detection of network attack and the prevention of technology. Byzantine Attacks refers to the network attack which means that the communication network and the number of authorized nodes are controlled, disrupted or interfered with by the attackers. Each node normal communications in the network extremely be attacked by Byzantine Attacks as a kind of active internal attacks. The prevention and detection of Byzantine attack has been the most difficult problems in the network security field.Since Byzantine attack has special features and diversity. How to defend against many types of Byzantine Attack and the United Byzantine Attack with network node has been a focus which researchers paid attention to.We present a Byzantine attack ontology model which is used in the active defense system to solve these hot points in the studies of Byzantine attack. Ontology can define the relationship between two concepts strictly as a knowledge representation technology. The target of ontology is description of knowledge of related fields, the establishment of the concept which the common people recognized in the areas, the provision of common understanding of the knowledge in this area and the clear definition of the interrelationship between these concepts. At first we described layered concepts and properties of Byzantine attack from three aspects, classes, relation and reasoning based on the requirements of ontology. Then we described attack ontology instance using ontology language. OWL has a good capacity of description logic to describe the framework, it is also able to express the relationship between the concept of object clearly. At last we described the inference rules related to attack which is used to construct ontological knowledge using rule language SWRL. That Added rules to OWL using SWRL can provide more ability of logic expression .Model of deductive reasoning and rules has been compiled through ProtégéTab and it also has been completed test rules. Ontology model not only can express Byzantine attack concept and describe the relationship between concepts, but also can share information between each node and detect it synergistically.