本文選題：安卓 + 模式匹配�。� 參考：《中國(guó)海洋大學(xué)》2014年碩士論文

【摘要】：日益強(qiáng)大的手機(jī)功能，一方面允許用戶處理更多的信息；另一方面也增加了手機(jī)泄密的風(fēng)險(xiǎn)。同時(shí)，人們利用手機(jī)上網(wǎng)也增加了感染病毒的風(fēng)險(xiǎn)。 聯(lián)網(wǎng)功能的日益發(fā)展，導(dǎo)致了對(duì)手機(jī)入侵的增加。與普通電腦相比，智能手機(jī)的信息安全防范能力弱，非法竊取用戶信息更加容易。威脅的數(shù)量和種類都在快速增加。手機(jī)病毒的危險(xiǎn)性比電腦病毒的危險(xiǎn)性大的多，畢竟手機(jī)中毒可能帶來(lái)巨額話費(fèi)損失。中國(guó)手機(jī)用戶總數(shù)已經(jīng)超過(guò)10億，智能手機(jī)用戶更是增長(zhǎng)快速，其中，安卓智能手機(jī)發(fā)展極為迅速，確保手機(jī)信息安全非常重要，入侵檢測(cè)系統(tǒng)應(yīng)運(yùn)而生。 Snort是美國(guó)Sourcefire公司開(kāi)發(fā)的一個(gè)輕量級(jí)網(wǎng)絡(luò)入侵檢測(cè)系統(tǒng)，目前在Windows、Linux系統(tǒng)當(dāng)中應(yīng)用良好，AC以及AC-BNFA匹配算法為其常用多模式的匹配算法，這些算法內(nèi)存占用較大且速度慢。本文提出一種新的模式匹配算法，通過(guò)進(jìn)行狀態(tài)轉(zhuǎn)換使自動(dòng)機(jī)狀態(tài)減少，在確保檢測(cè)率的同時(shí)加快匹配速率，減少內(nèi)存占用量，提高入侵檢測(cè)系統(tǒng)的檢測(cè)效率。 本文首先介紹安卓架構(gòu)，開(kāi)發(fā)環(huán)境搭建以及開(kāi)發(fā)關(guān)鍵技術(shù)，其中關(guān)鍵技術(shù)包括安卓四大組件當(dāng)中的活動(dòng)、服務(wù)、接收器，以及安卓數(shù)據(jù)庫(kù)、適配器等，通過(guò)關(guān)鍵代碼展示、特點(diǎn)描述等闡述此安全系統(tǒng)基礎(chǔ)技術(shù)。 其次，論述基于Snort的安卓手機(jī)安全管理的需求分析，并對(duì)五大基本模塊，防盜設(shè)置模塊、備份恢復(fù)模塊、隱私地帶模塊、本地?cái)?shù)據(jù)模塊以及系統(tǒng)工具模塊進(jìn)行概述。 再次，研究改進(jìn)WM多模式匹配算法，提出TWM多模式匹配算法，一定程度上提高檢測(cè)速度。 再次，本文提出新的入侵檢測(cè)系統(tǒng)多模式匹配算法，通過(guò)改進(jìn)的多模式匹配算法，，無(wú)需比較新符號(hào)串與樹(shù)，僅比較前一符號(hào)串，結(jié)合Snort優(yōu)勢(shì)，確保檢測(cè)準(zhǔn)確率，同時(shí)減少內(nèi)存占用，提高檢測(cè)速度。 最后，進(jìn)行試驗(yàn)驗(yàn)證，搭建演示系統(tǒng)，通過(guò)與相關(guān)系統(tǒng)進(jìn)行對(duì)比，得出結(jié)果。
[Abstract]:The growing power of mobile phones allows users to process more information and increases the risk of cell phone leaks. At the same time, people use mobile phones to access the Internet also increased the risk of infection with the virus. With the development of network functions, the number of mobile phone intrusions is increasing. Compared with ordinary computers, smart phones have less information security and it is easier to illegally steal information from users. The number and variety of threats are increasing rapidly. Cell phone viruses are far more dangerous than computer viruses. After all, cell phone poisoning can cost a lot of money. The total number of mobile phone users in China has exceeded 1 billion, and the number of smartphone users is growing rapidly. Among them, Android smartphones are developing very quickly, so it is very important to ensure the security of mobile phone information, and intrusion detection system emerges as the times require. Snort is a lightweight network intrusion detection system developed by American Sourcefire Company. At present, good AC and AC-BNFA matching algorithms are used in Windows Linux system. These algorithms occupy large memory and slow speed. In this paper, a new pattern matching algorithm is proposed, which can reduce the state of automata by state conversion, accelerate the matching rate while ensuring the detection rate, reduce the amount of memory occupied, and improve the detection efficiency of intrusion detection system. This paper first introduces the Android architecture, development environment and development key technologies, including the four components of Android activities, services, receivers, as well as Android database, adapters, and so on, through the key code presentation. The basic technology of this security system is described. Secondly, the requirement analysis of Android mobile phone security management based on Snort is discussed, and the five basic modules, anti-theft setting module, backup and recovery module, privacy zone module, local data module and system tool module are summarized. Thirdly, the improved WM multi-pattern matching algorithm is studied, and the TWM multi-pattern matching algorithm is proposed to improve the detection speed to some extent. Thirdly, this paper proposes a new multi-pattern matching algorithm for intrusion detection system. Through the improved multi-pattern matching algorithm, there is no need to compare the new symbol string and tree, only compare the former symbol string, combined with the advantages of Snort, to ensure the detection accuracy. At the same time, reduce the memory consumption, improve the speed of detection. Finally, the experimental verification, the establishment of a demonstration system, through the comparison with the relevant systems, the results are obtained.
【學(xué)位授予單位】：中國(guó)海洋大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08;TP311.52

【參考文獻(xiàn)】

相關(guān)期刊論文 前3條

1 劉昌平;范明鈺;王光衛(wèi);鄭秀林;宮亞峰;;Android手機(jī)的輕量級(jí)訪問(wèn)控制[J];計(jì)算機(jī)應(yīng)用研究;2010年07期

2 公磊;周聰;;基于Android的移動(dòng)終端應(yīng)用程序開(kāi)發(fā)與研究[J];計(jì)算機(jī)與現(xiàn)代化;2008年08期

3 鄭健;賀超;;Android和Chrome的發(fā)展與未來(lái)[J];移動(dòng)通信;2010年11期

本文編號(hào)：1937263