网络入侵检测方法的浅析.docVIP

PAGE  XXXX大学 2014年毕业设计（论文） 网络入侵检测方法的研究 学 院: 专 业: 班 级: 学 号: 学生姓名: 指导教师: 年 月 日 PAGE  PAGE 28 摘要：随着全球因特网继续快速发展和因特网用户的快速增多，网络安全问题这一问题逐渐变的重要和引人注目。自2001年我国信息产业开始蓬勃发展，因特网用户继续快速增长。因特网的开放性决定网络系统的脆弱性加上国内网络的发展客观环境的特殊性，安全问题尤其是企业网络的安全问题变的十分突出。 在此情况下，入侵检测等安全技术被推到了防御攻击的前沿。本文先介绍了入侵检测的概念、构成和作用，然后分析比较了常见入侵检???系统及方案的优点和不足，最后以国内某大企业的网络为例，在充分了解原有入侵检测系统的现状及安全需求并结合未来发展的趋势上提出了新的解决方案，并指出了实施中应该注意的问题。 企业网络安全问题在我国企业中广泛存在，解决方案在一定程度上可以相互借鉴甚至可以直接搬用。所以文中在研究特定企业的入侵检测解决方案时尽量兼顾大部分企业所面临的共性问题，以期本文能为更多的企业在入侵检测解决方案方面有所借鉴。 关键词：网络安全，网络攻防 ，入侵检测，NIDS，解决方案，Agent系统 Abstract: Continues along with the global Internet fast to develop fast increases with the Internet user, network security question this question changes gradually unimportance and noticeable. Our country information industries start the vigorous development from 2001, the Internet user continues fast to grow. Internets openness decided the network system the vulnerability adds on the domestic network the development objective environment particularity, the security problem enterprise network security problem changes in particular is extremely prominent. In this situation, security technology and so on invasion examination was advanced the defense attack front. This article introduced first the invasion examination concept, the constitution and the function, then the analysis have compared the common invasion examination system and the plan merit and the insufficiency, finally take the home some big enterprises network as the example, future will develop in the full understanding original invasion examination system present situation and the security requirements and the union in the tendency proposed the new solution, and had pointed out in the implementation will be supposed to pay attention question. The enterprise network secu