【摘要】：當前，物理隔離技術(shù)已成為網(wǎng)絡(luò)安全保密體系中不可或缺的重要手段。然而美國國防部提出的“離線攻擊”技術(shù)，讓與互聯(lián)網(wǎng)物理隔離的局域網(wǎng)系統(tǒng)不再高枕無憂。穩(wěn)定安全的物理隔離網(wǎng)絡(luò)入侵檢測系統(tǒng)是保密工作者迫切需要的，對于網(wǎng)絡(luò)安全保密體系也具有重要的理論與實際意義。 本文通過分析入侵檢測等已有的網(wǎng)絡(luò)防護技術(shù)的不足以及對新型“離線攻擊”手段進行了分析和研究，提出了通過對關(guān)鍵主機節(jié)點及周邊通信鏈路數(shù)據(jù)包流量、無線電頻譜等數(shù)據(jù)的監(jiān)測，，建立一種新型的分布式無線入侵檢測系統(tǒng)。首先，本文引入無線電多頻點監(jiān)測干擾網(wǎng)絡(luò)，將其部署在物理隔離網(wǎng)絡(luò)外圍，起到外層監(jiān)測以及后期干擾作用。其次，引入關(guān)鍵節(jié)點概念，文中設(shè)計方案中對物理隔離網(wǎng)絡(luò)中各節(jié)點量化后按照重要性采取不同的策略，提出新的監(jiān)測算法策略，對攻擊行為進行等級劃分，計算出潛在損失值，而本方案將監(jiān)測重點放在關(guān)鍵節(jié)點上，能夠在收集到更有針對性數(shù)據(jù)的同時降低自身能耗。最后，論文將通過仿真技術(shù)驗證雙層網(wǎng)絡(luò)中基于關(guān)鍵節(jié)點監(jiān)測的分布式入侵檢測方案具有更高的檢測正確率，很好地實現(xiàn)了對網(wǎng)絡(luò)攻擊監(jiān)測的功能。
[Abstract]:At present, physical isolation technology has become an indispensable and important means in network security and security system. However, the "offline attack" technology proposed by the US Department of Defense makes the LAN system physically isolated from the Internet no longer rest easy. The stable and secure physical isolation network intrusion detection system is urgently needed by the security workers, and also has important theoretical and practical significance for the network security system. By analyzing the shortcomings of the existing network protection technology, such as intrusion detection, and analyzing and researching the new "off-line attack" method, this paper puts forward that the packet traffic of the key host node and its surrounding communication link is analyzed and studied. A new distributed wireless intrusion detection system is established by monitoring radio spectrum and other data. Firstly, the radio multi-frequency monitoring jamming network is introduced and deployed on the periphery of the physical isolation network, which plays the role of outer monitoring and late interference. Secondly, the concept of key nodes is introduced. After quantization of each node in the physical isolation network, different strategies are adopted in the design scheme, and a new strategy of monitoring algorithm is put forward to classify the attack behavior. The potential loss value is calculated, and the monitoring is focused on the key nodes, which can reduce the energy consumption while collecting more targeted data. Finally, the paper verifies that the distributed intrusion detection scheme based on critical node monitoring in double-layer network has higher detection accuracy, and realizes the function of network attack monitoring.
【學位授予單位】：西安電子科技大學
【學位級別】：碩士
【學位授予年份】：2014
【分類號】：TP393.08

【參考文獻】

相關(guān)期刊論文 前10條

1 李慧芬;;網(wǎng)絡(luò)入侵檢測技術(shù)淺析[J];電腦知識與技術(shù);2011年04期

2 胡靜;;基于OPNET的無線傳感器網(wǎng)絡(luò)仿真[J];電氣電子教學學報;2006年06期

3 禹曉慶;網(wǎng)絡(luò)物理隔離安全防御技術(shù)[J];中國電子出版;2000年06期

4 張偉偉;王俊;秦琳琳;吳剛;;基于NS2的無線傳感器網(wǎng)絡(luò)仿真平臺設(shè)計[J];電子技術(shù);2009年10期

5 張金存;喬欣;;試論“計算機中心戰(zhàn)”[J];國防科技;2013年03期

6 薛楠;周賢偉;辛曉瑜;李丹;楊楨;;一種解決認知無線電網(wǎng)絡(luò)模仿主用戶攻擊問題的方案[J];計算機科學;2009年08期

7 胡華平,陳海濤,黃辰林,唐勇;入侵檢測系統(tǒng)研究現(xiàn)狀及發(fā)展趨勢[J];計算機工程與科學;2001年02期

8 毛劍琳;吳智銘;;無線傳感器網(wǎng)絡(luò)仿真系統(tǒng)的設(shè)計與實現(xiàn)[J];計算機仿真;2006年06期

9 劉發(fā)龍;;計算機網(wǎng)絡(luò)入侵檢測技術(shù)概述[J];科技廣場;2010年06期

10 陳佩劍;楊岳湘;唐川;;基于信任度量機制的分布式入侵檢測系統(tǒng)[J];山東大學學報(理學版);2011年09期

相關(guān)博士學位論文 前2條

1 白媛;分布式網(wǎng)絡(luò)入侵檢測防御關(guān)鍵技術(shù)的研究[D];北京郵電大學;2010年

2 余修武;礦井安全智能監(jiān)測無線傳感器網(wǎng)絡(luò)關(guān)鍵技術(shù)研究[D];武漢理工大學;2013年

本文編號：2301872