坚固网关系统研究-通信与信息系统专业论文.docxVIP

论文摘要硕士研究生毕业论文：坚固网关系统研究 论文摘要 硕士研究生毕业论文：坚固网关系统研究 论文摘要 作者：向继专业： 通信与信息系统 导师：荆继武 随着因特网(Intenaet)的迅速发展，它为企业和政府带来极大的便利。但是 因特网也是一柄双刃剑，它为企业和政府提供高效率和广阔业务范围的同时，也 使它们面临来自网络的各种各样的安全威胁。 这其中，DoS和DDoS攻击的由于其潜在的破坏性强，难于防御的特点，日 益成为网络安全的头号威胁。目前的一些成熟的安全措施，如防火墙、入侵检测 系统等等，对DoS攻击防御能力都有限，无法成为DoS攻击的完全解决方案， 并且它们自身也会成为DoS攻击的目标。 针对这种情况，本文提出了一种专门用于抵制DoS攻击的系统——坚固网关 系统，它具有安全性和透明性的特点。它利用数据挖掘和统计算法等检测技术检 测DoS攻击，确定攻击流量的特征，并采取多种防御措施来削弱和消除攻击流 量对网络和系统的影响，确保在攻击发生的情况下，仍能为合法用户提供服务。 通过研究目前DoS攻击检测技术和防御技术，我们提出了自己的检测方法和 防御方法，我们的方法将多种技术有机结合，实现对各种DoS攻击的防御。 本文还描述了坚固网关原型系统的具体实现。 关键字：拒绝服务攻击，坚固网关，积极防御，数据挖掘，自适应模型产生。 坚固网关系统研究“Research 坚固网关系统研究 “Research on Robust Gateway System” ABSTRACT Xiang Ji(Communication and Information System) Directed by：Jing JiWu The rapid growth of the Intemet has provided the governments and enterprises with great advantages．However,the Intemet is a double．edged sword．Wllile the Internet improves the efficiency and extents the reach of business of governments and enterprises．it also exposes them to a 1arger variety of security threats from network． Among various security threats，DoS and DDoS have gradually become the most serious ones．because they have potentially heavy damage and are not easy to be effectively prevented．Nowdays，there are many security measures，such as firewalls and intrusion detection systems．but they all have 1imited ability to defense against DoS attacks．and they could’t be a perfect scheme to solve the problems．On the other hand，they are inherently weak to DoS Attacks． Response to the DoS threats，we developed a special system named‘‘Robust Gateway System”to defense against DoS attack．The system has the characteristic of security and transparent．Firstly it uses data mining and statistic algorithms to detect DoS attacks，and then determines the feature of attack flows，lastly uses various defense methods to weaken or eliminate the effect of attacks．The system ensures that when the network or victim systems are being attacked，they can continue to serve le百timate users． Based o