【摘要】：計(jì)算機(jī)網(wǎng)絡(luò)的發(fā)展具備鮮明的時(shí)代色彩。時(shí)下，以云計(jì)算為主的網(wǎng)絡(luò)大數(shù)據(jù)應(yīng)用處理模式已經(jīng)成為網(wǎng)絡(luò)發(fā)展的主旋律。這一變化也為網(wǎng)絡(luò)安全帶來(lái)了新的機(jī)遇與挑戰(zhàn)。目前，網(wǎng)絡(luò)安全問(wèn)題仍然是威脅網(wǎng)絡(luò)健康發(fā)展的重要因素。如何解決大數(shù)據(jù)時(shí)代的網(wǎng)絡(luò)發(fā)展的安全問(wèn)題是一個(gè)非常有意義的研究課題。 為了解決這個(gè)問(wèn)題，本文提出了一種網(wǎng)絡(luò)安全事件檢測(cè)系統(tǒng)的體系結(jié)構(gòu)并基于云計(jì)算架構(gòu)實(shí)現(xiàn)。這其中將采集的網(wǎng)絡(luò)大數(shù)據(jù)交由云平臺(tái)進(jìn)行處理分析，問(wèn)題事件則通過(guò)檢測(cè)平臺(tái)向管理員進(jìn)行報(bào)告。此種處理模式顯著提高了網(wǎng)絡(luò)安全事件的檢測(cè)效率。 為進(jìn)一步提高檢測(cè)效率，在算法的設(shè)計(jì)方面，本文在對(duì)特征熵研究的基礎(chǔ)之上，深入分析不同應(yīng)用的熵值特征曲線，，探究它們?cè)谔卣黛刂瞪系淖兓?guī)律。提出了基于活躍熵的網(wǎng)絡(luò)安全事件檢測(cè)算法。從活躍熵的熵值計(jì)算、計(jì)算尺度的選擇策略上對(duì)算法進(jìn)行詳細(xì)說(shuō)明。 本文實(shí)現(xiàn)了基于Hadoop的云計(jì)算環(huán)境，并針對(duì)該環(huán)境特點(diǎn)，設(shè)計(jì)了完整的檢測(cè)編程模型，將多種算法與云計(jì)算進(jìn)行整合，有效提升了計(jì)算速度，在檢測(cè)具有隨機(jī)特性的網(wǎng)絡(luò)安全事件方面取得較好的實(shí)驗(yàn)結(jié)果。 本文將云檢測(cè)進(jìn)行系統(tǒng)化應(yīng)用，設(shè)計(jì)并開發(fā)出可擴(kuò)展的基于云平臺(tái)的安全事件檢測(cè)系統(tǒng)，從實(shí)際應(yīng)用角度對(duì)本文的算法和系統(tǒng)進(jìn)行測(cè)試，取得了較好的成果。
[Abstract]:The development of computer network has a bright color of the times. Nowadays, cloud-based network big data application processing mode has become the main theme of network development. This change also brings new opportunities and challenges to network security. At present, network security is still an important factor threatening the healthy development of network. How to solve the network security problem in big data era is a very meaningful research topic. In order to solve this problem, a network security event detection system architecture is proposed and implemented based on cloud computing architecture. The collected network big data is handed over to the cloud platform for processing and analysis, and the problem events are reported to the administrator through the detection platform. This processing mode improves the detection efficiency of network security events. In order to further improve the detection efficiency, in the aspect of algorithm design, based on the study of feature entropy, this paper deeply analyzes the characteristic curve of entropy value in different applications, and probes into the law of their change in the characteristic entropy value. A network security event detection algorithm based on active entropy is proposed. The algorithm is explained in detail from the calculation of the entropy of active entropy and the selection strategy of calculation scale. In this paper, the cloud computing environment based on Hadoop is implemented, and according to the characteristics of the environment, a complete detection programming model is designed, which integrates various algorithms with cloud computing, and effectively improves the computing speed. Good experimental results are obtained in detecting network security events with random characteristics. In this paper, cloud detection is systematically applied, and an extensible security event detection system based on cloud platform is designed and developed. The algorithm and system are tested from the point of view of practical application, and good results are obtained.
【學(xué)位授予單位】：天津理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前2條

1 ;國(guó)家計(jì)算機(jī)網(wǎng)絡(luò)應(yīng)急技術(shù)處理協(xié)調(diào)中心四川分中心關(guān)于四川省一般網(wǎng)絡(luò)安全事件的通報(bào)(2011年第4期)[J];通信與信息技術(shù);2011年06期

2 王紅艷;;一種基于Hadoop架構(gòu)的網(wǎng)絡(luò)安全事件分析方法[J];信息網(wǎng)絡(luò)安全;2013年01期

相關(guān)博士學(xué)位論文 前1條

1 李玉萍;基于先進(jìn)計(jì)算的智能入侵檢測(cè)系統(tǒng)研究[D];中國(guó)地震局地球物理研究所;2012年

本文編號(hào)：2209880