本文選題：網(wǎng)絡(luò)安全 + 模式匹配�。� 參考：《電子科技大學(xué)》2014年碩士論文

【摘要】：隨著計(jì)算機(jī)網(wǎng)絡(luò)技術(shù)的發(fā)展和互聯(lián)網(wǎng)的廣泛應(yīng)用,其中電子商務(wù)的許多新概念的應(yīng)用、家庭信息和軍事信息戰(zhàn)等新領(lǐng)域發(fā)展尤為突出,其安全問題日益突出,現(xiàn)在的計(jì)算機(jī)系統(tǒng)現(xiàn)是盤大而復(fù)雜的,應(yīng)用軟件也日趨復(fù)雜,系統(tǒng)的安全漏洞不可避免的,尤其是在計(jì)算機(jī)系統(tǒng)安全和網(wǎng)絡(luò)安全的研究和發(fā)展滯后,各種攻擊手段不斷出現(xiàn),再加上人們的防范意識(shí)淡薄,現(xiàn)狀堪憂。因此,一般的入侵預(yù)防技術(shù)已經(jīng)難以保證計(jì)算機(jī)系統(tǒng)的安全,還需要一種新的技術(shù),能及時(shí)發(fā)現(xiàn)未經(jīng)授權(quán)的行為,并做出相應(yīng)處理,這就是入侵檢測(cè)技術(shù)。本文對(duì)湖南商學(xué)院北津?qū)W院校園網(wǎng)的網(wǎng)絡(luò)結(jié)構(gòu)進(jìn)行了深入的分析,以此為基礎(chǔ),設(shè)計(jì)一個(gè)基于模式匹配和協(xié)議分析的入侵檢測(cè)系統(tǒng),從以下幾個(gè)方面開展研究工作:(1)研究檢測(cè)原理,提出一種應(yīng)用于校園網(wǎng)運(yùn)行環(huán)境的,運(yùn)用協(xié)議分析和模式匹配技術(shù)的入侵檢測(cè)系統(tǒng)框架,并對(duì)各重要模塊進(jìn)行深入研究。(2)數(shù)據(jù)捕獲模塊是入侵檢測(cè)系統(tǒng)檢測(cè)數(shù)據(jù)的來源,對(duì)系統(tǒng)性能有著重要影響,通過深入分析,在原有的捕獲機(jī)制下,提出改進(jìn)方案,即使用網(wǎng)絡(luò)設(shè)備在Linux系統(tǒng)內(nèi)核中實(shí)現(xiàn)中斷緩和的接口技術(shù)以及內(nèi)存映射技術(shù)來提高捕獲效率,實(shí)驗(yàn)表明,捕獲效率有明顯提升。(3)在入侵檢測(cè)模塊的設(shè)計(jì)上,協(xié)議分析和模式匹配技術(shù)使得系統(tǒng)性能比傳統(tǒng)的入侵檢測(cè)系統(tǒng)有所提高。在字符串匹配算法中對(duì)BM算法進(jìn)行了改進(jìn),顯著提高入侵檢測(cè)系統(tǒng)的檢測(cè)效率。通過系統(tǒng)性能測(cè)試實(shí)驗(yàn)和在實(shí)際教學(xué)網(wǎng)中的運(yùn)行,測(cè)試了入侵檢測(cè)系統(tǒng)的功能,并對(duì)檢測(cè)結(jié)果進(jìn)行匯總分析,說明了本文設(shè)計(jì)的系統(tǒng)可以為學(xué)院校園網(wǎng)絡(luò)的安全提供更有力的保障。
[Abstract]:With the development of the computer network technology and the wide application of the Internet, the application of many new concepts of electronic commerce, the development of new fields such as family information and military information warfare are particularly prominent, and the security problems are becoming more and more prominent.Now the computer system is large and complex, the application software is becoming more and more complex, the security vulnerability of the system is inevitable, especially when the research and development of the computer system security and the network security lag behind, all kinds of attack means appear constantly.In addition, people's awareness of prevention is weak, the status quo is worrying.Therefore, it is difficult for the general intrusion prevention technology to guarantee the security of computer system, and a new technology is needed, which can detect and deal with the unauthorized behavior in time, which is called intrusion detection technology.In this paper, the network structure of the campus network of Beijin University of Hunan Business School is deeply analyzed. Based on this, an intrusion detection system based on pattern matching and protocol analysis is designed.From the following several aspects of research work: 1) to study the principle of detection, put forward a framework of intrusion detection system, which is applied to the running environment of campus network, using protocol analysis and pattern matching technology.The data capture module is the source of intrusion detection system detection data, which has an important impact on the system performance. Through in-depth analysis, under the original capture mechanism, the improved scheme is put forward.That is, using network devices to implement interrupt mitigation interface technology and memory mapping technology in the kernel of Linux system to improve the capture efficiency. The experiment shows that the capture efficiency has a significant improvement in the design of intrusion detection module.Protocol analysis and pattern matching make the system performance better than the traditional intrusion detection system.In order to improve the detection efficiency of intrusion detection system, BM algorithm is improved in string matching algorithm.The function of the intrusion detection system is tested through the system performance test experiment and the operation in the actual teaching network, and the test results are summarized and analyzed.It shows that the system designed in this paper can provide a more effective guarantee for the security of college campus network.
【學(xué)位授予單位】：電子科技大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08;TP393.18

【參考文獻(xiàn)】

相關(guān)期刊論文 前1條

1 寧卓;龔儉;;入侵檢測(cè)系統(tǒng)中的多模式精確匹配算法WDawgMatch[J];計(jì)算機(jī)工程與科學(xué);2010年08期

，

本文編號(hào)：1739442