网络入侵检测系统NIDS的新技术研究

《网络入侵检测系统NIDS的新技术研究》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、天津大学博士学位论文网络入侵检测系统NIDS的新技术研究姓名：薛强申请学位级别：博士专业：计算机应用技术指导教师：孙济洲20040601ABSTRACTThisdissertationfirstlyintroducesintrusiondetectiontechnologyandintrusiondetectionsystem.Thenitanalyzesandsummarizesthecurrentstateofresearchonthetechnologies.Atlastitpresentsproblemsintrusiondete

2、ctionsystemfacedandtrendofresearch.Mathematicalmodelisthebasementforselectingandapplyingintrusiondetectionpolicies,soa2-dimensioncollectivitymodelisproposedafteranalyzingthespaceandtimecharacterofintrudingactivity.TraditionalNetworkIntrusionDetectionSystem(KIDS)scansthein

3、comingIPpacketsandjudgetheattacktypesbythesensitiveinformationmatching.Inthispaper,wedeviseandimplementaparallelreassemblingalgorithm(APPRA)inapplicationlayerforlarge-scalenetworkintrusiondetection.ExperimentresultshowsthatAPPRAisefficientThispaperdescribesthreeclassesofh

4、oneypotsandthebuildingofTrapNetworkindetail.User-ModeLinuxisusedtoimplementtheVirtualDistributedHoneypotSystem.Onrecordingtechnologies,wegiveanewthoughtofKeyboardFingerprintSpectrum(KFS).AmethodofKFSbasedonWin32GlobalHookisalsointroduced.TheDDoSattackandPortRecallattackha

5、vebeengreatdangerstoInternetsecurity.Iftheyarecombinedtogethertoformanewkindofatack,theeffectwillbemoreseriousthananyoneofthem.Therefore,themodelcalledDistributedPortRecallattacksispresentedheretodrawatention.Inaddition,somemethodsofmisusedetectionandanomalydetectionareal

6、soproposedinthispaper.Inthispaper,weapplyintelligentagenttechnologyforpurposeofreal-timeresponse.Themainnoveltyinthistechnologyisitsmulti-levelagentarchitecturetoperformdynamicpolicyupdateinintrusiondetectionsystemthroughwirelessnetgate.Finally,wepresentTDNIDSasanarchetyp

7、alnetworkintrusiondetectionsystemandestimatethefuturedevelopmentofthissystem.KEYWORDS:networksecurity,intrusiondetection,honeypot,DDoS独创性声明本人声明所呈交的学位论文是本人在导师指导下进行的研究工作和取得的研究成果，除了文中特别加以标注和致谢之处外，论文中不包含其他人己经发表或撰写过的研究成果，也不包含为获得止互生人星生或其他教育机构的学位或证书而使用过的材料。与我一同工作的同志对本研究所做的任何贡献均已

8、在论文中作了明确的说明并表示了谢意。学位论文作者签“:薛强签字日期:“·夺年‘月al’刁学位论文版权使用授权书本学位论文作者完全了解.2速日暨色有关保留、使用学位论文的规定。特授权-入圭垫组可