高级检索

    低时延Agentic网络中基于三阶段关联验证的伪造链路攻击检测

    Tri-Phase Correlation Verification: Detecting Fabricated Link Attacks in Low-Latency Agentic Networks

    • 摘要: 面向低时延的Agentic网络环境,研究了一种基于关联链路验证的伪造链路攻击检测方法. 在该网络环境下,正常链路与伪造链路在测量时延等关键指标上的统计特征差异较小,并且背景流量和协调器过载攻击的影响会放大测量误差,缩小该差异,导致现有方法的检测性能骤降. 对此,提出一种基于关联链路验证的伪造链路攻击检测方法,包含3个阶段:首先,采用一种有效时延转换方法缓解测量误差的影响,并将处理后的测量时延等转化为链路性能指标;然后,根据提出的多径传输模拟方法,将关联链路之间的性能差异转化为易于观测的统计特征;最后,基于极值理论和概率分布拟合方法确定统计特征的阈值,用于伪造链路的检测. 仿真实验结果表明,在不同的网络规模和攻击场景下,所提出的方法能够有效地检测低时延Agentic网络中的伪造链路攻击,并且在检测性能方面明显优于现有的相关方法,F1分数提升达20%~30%. 特别地,当链路传输时延低至0.1 ms时,仍然能取得95.23%的检测率和0.28%的误判率,显示出良好的鲁棒性.

       

      Abstract: This paper investigates the critical challenge of detecting fabricated link attacks in low-latency Agentic network environments, where conventional detection methods face significant limitations. The fundamental difficulty stems from three key factors: 1) the measured performance differences between normal and fabricated links often exhibit marginal variations that fall below meaningful detection thresholds; 2) dynamic background traffic patterns introduce substantial interference that obscures genuine attack signatures; and 3) coordinated overload attacks deliberately distort measurement accuracy. These factors collectively degrade the detection performance of existing methods by significantly reducing the observable distinction between legitimate and malicious links. To address these challenges, we propose a novel three-phase detection framework based on correlated link verification. The first phase implements an effective delay transformation method that reduces measurement errors while converting raw measurements into meaningful link performance metrics. The second phase employs a multipath transmission simulation technique that amplifies subtle performance disparities between correlated links into statistically observable features. The final phase establishes robust detection thresholds through the combined application of extreme value theory and probability distribution fitting methods. Comprehensive simulation results validate that our proposed method consistently outperforms existing approaches across diverse network scales and attack scenarios. The framework demonstrates particular effectiveness in low-latency agentic environments, maintaining superior detection performance while meeting stringent timing requirements. Specifically, the framework achieves a 20% to 30% improvement in F1 score compared to state-of-the-art methods. Notably, even under ultra-low latency conditions (e.g., 0.1ms link delay), the proposed method maintains a high detection rate of 95.23% with a false positive rate as low as 0.28%. These advancements provide a practical solution for securing next-generation autonomous networks against sophisticated link fabrication attacks.

       

    /

    返回文章
    返回