合作式入侵响应系统的研究与实现

《合作式入侵响应系统的研究与实现》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、北京交通大学硕士学位论文合作式入侵响应系统的研究与实现姓名：陈亮申请学位级别：硕士专业：计算机系统结构指导教师：黄厚宽20061201ABSTRACTWithtlaerapiddevdopmentofnetworkandinformation,soanityproblemsbec呲moleandlnol慧importantAsthefrequencyofnetworksecurityincidents，incidentrespomehasb伽focusedonagaills'talargeamountofnetworkatta趣

2、intrusiondetectionsystem(mS)reaelaedahi曲levelofsophisticationandcandetectintrusionswithavarietyofmethods．Unfortunately,tlaomajorityofintrusionrcspomesystemsreacttoattacksbygeneratingrCpOI'tSOralarms．Systemadminislratot葛neithercankeepupwiththepaecthatfillID$i。deliveri

3、ngalerts,llor鞠ntheyrBactUloOntlaesowithinadequatetimelimits．Ⅱ他slowl'esponsctomultipleattacksmayendupwithseriousdamagesbeyondrecovery．Manualresponsetocompute-attacksisinadequatebyitself．Automaticresponsessyst蹦lshawtotakeoverthattask．Incaseofanidentifiedintrusion,these

4、componentshavotoinitiateappropriateaetiomtocounteremergingthreats．Ontheotherhandafircwallc趾determinewlaichtratfieisallowedinandoutofyournetwork,basedoilpredefinedrules．buttherelacksintca-op,啪bilitywimfirewallsandIDS．Inthisthesis。thevariousintrusionresponsesystems躺fir

5、stlycategorizedandstudied．BasedOilthesummaryofrelatedstudies,thisthesispresentsacomnlonframeworkforthecooperativeautomatedintrusionrespon∞system．11"systemismainlybuiltwiththreefunctionalblocks：theintrusiondetectioncomponent,tho∞sp蚰∞decisioncomponentandthecontrolecnto

6、rcomponent．n地intrusiondetectioncomponent啪redueofalseratioandnegafiveratiothroughalertaggregationandalertcorrelationuponlaWalert．耵璩re：岬edecisioncomponentanalyzesthealertresponsetimeandresponsemcllsul'e8．AtlastthecontrolcenterCalldecidewhichrightlllea,surctoimplement．F

7、orexample，dynamicallyModifyingtheFirewallrules，sendEmailtothesecurityadministrators．Thuswec弛defendtheattackmoleeffectivelyandprotectOUrnetworkbetter．Atlasttheexperimentshowsthatthesystemcouldfin矗lltheobjectives,thatis．10werfalsealarmratioandhigherresponseability．KEYW

8、ORDS：NetworkSeeurity；Automaticinla-usionresponse；Responsedecision；FirewaUCLAS81、IO：TP393．08致谢本文是在尊敬的导师黄厚宽教授和田盛丰教授的精心指导和悉心关怀下完成的．导师渊