信息学院本科生业设计论文模版.docVIP

摘要 随着网络技术的飞速发展，网络安全问题也越来越突出。顺应这一趋势，涌现出了许多的网络安全技术，如网络防火墙、病毒检测、密码技术、身份认证等。但是，即使如此，还是有很多服务器在不能够及时检测的预防的情况下被攻击，导致了巨大的经济损失。这种被动的防御系统显露出技术上很多的不足，于是有人提出了主动的网络安全防御体系，这其中的代表就是网络入侵检测系统。 网络入侵检测系统的根本功能就是实时地检测并分析网络的行为，根据分析的结果做出相应的响应。这样就可以及时地检测出网络的非法攻击，提早做出判断，减少损失。网络入侵检测系统的出发点在于其主动性，它不是被动的防御。主动性是入侵检测系统的一大特色，也是其发展迅速并被人们重视的一个重要原因。 本文介绍了入侵检测系统的概念、产生、定义及分类。介绍了目前各种常见的网络入侵检测系统，分析了网络入侵检测系统的工作原理。对网络入侵检测系统进行模块化分析，其中，重点介绍了与课题实现相关网络数据包捕获模块、网络协议分析模块和存储模块的设计与实现。 关键词：入侵检测系统，网络数据包，网络协议 ABSTRACT As the technology of network developing fast, the problem of network security is emerging day by day. In order to temporize this trend, different kinds of network safety methods appear, such as Network Firewall, Virus Detecting, Code Technology, id Authentication ,etc. Even though, incalculable economic loss are caused because many servers are attacked without effective detecting and defending. Many deficiency in technology are based on this passive defending system, then the active defending system come out of the surface and the representative is Network Inbreak Detecting System. The Ultimate function of this system is detecting and analysing the net behavior in real time and react to the result of the behavior. By this way, illegal attack can be pre-detected and loss can be avoided. The emphasis of this system is the property of active, not passive. The active property is also the reason while this system is so highly regarded! This thesis talked about the concept, origin, definition and sort of the Network Inbreak Detecting System. Also common Network Inbreak Detecting System work principle are mentioned. It analyses this system in modular layer, and the stress point is focused on data-package capture, the design and realization of analyse and store modular for network protocol. Keywords: Intrusion Detection System, data-package, network protocol. 目录 摘要 I ABSTRACT II 第1章 引言 1 1.1 背景 1 1.2 研究内容 1 第2章 入侵检测系统 3 2.1 入侵检测系统概述 3 2.1.1 入侵检测系统的定义 3 2.1.2 入侵检测系统的任务及目的 3 2.2 入侵检测系统的分类 3