毕业设计（论文）-网络入侵检测系统的分析与研究.docVIP

学 士 学 位 论 文 系 别：计算机科学与技术 学科专业：计算机科学与技术 姓 名： 运 城 学 院 2012年6月  网络入侵检测系统的分析与研究 系 别：计算机科学与技术 学科专业：计算机科学与技术 姓 名： 李 桥 指导老师： 王 晓 丽 运 城 学 院 2012年6月 网络入侵检测系统的分析与研究 摘 要：随着当前计算机网络技术的快速发展和广泛应用，人们在得益于信息革命所带来巨大机遇的同时，也面临着信息安全问题。入侵检测系统(Intrusion Detection System，IDS)作为对传统安全技术极其有益的补充，作为一种主动安全防御机制，受到越来越广泛的重视。入侵检测系统能够主动地实时地跟踪各种危害系统安全的入侵行为，并做出及时的响应。本论文首先分析了信息安全需求当今信息系统所面临的主要威胁。其次，分析了解决信息安全问题的安全策略和安全技术。，对目前的入侵检测系统进行了分析和研究。最后，针对当前主流入侵检测系统产品的缺点，引入了并行字符串搜索算法PBM。本论文通过MPI程序实现了字符串的并行搜索，从而在理论上证明了使用并行字符串搜索算法提高网络入侵检测速度的可行性。 关键词：信息安全 入侵检测 算法 Analysis and Research Network-Based Intrusion Detection System Abstract: With the rapid development and wide application of computer network technology, people have benefited from great opportunities brought by the information revolution, at the same time, which is also facing the issue of information security. Intrusion detection system (IDS) is an extremely useful complement to traditional security technology, which is considered to be more widely appreciated as an active security mechanism. It can take the initiative to real-time tracking of a variety of intrusion events against system security, and can also make a timely response. This paper firstly analyzes the demand for information security and main threats to information security in todays information systems. Secondly, it analyzes the security policy and security technology to solve information security problems. In addition, analysis of the current intrusion detection systems is also to be done. Finally, for the shortcomings of current intrusion detection systems, an algorithm which is named parallel string search algorithm PBM is introduced. This paper achieves the parallel string search through MPI program in order to prove the feasibility theoretically that the parallel algorithm can improve the speed of rules match of the network intrusion.Keywords: information security intrusion detection system algorithm 目 录 前 言 1 第1章 绪论 2 1.1 入侵检测系统的研究背景及意