基于移动代理技术和协议分析技术的入侵检测系统-通信与信息系统专业论文.docxVIP

武汉理工大学硕士学位论文Abstract 武汉理工大学硕士学位论文 Abstract Intrusion detection is a new security protection technology following、Ⅳitll the traditional security protection technology，such as‘‘fire-proof-wall”，“data encryption．It collects information from the critical points in computers and networks， then it analyses the information and searches the intrusion marks．At lasL it responses to the intrusion to protect the system．The research is to build an effective，adaptive， and extendable intrusion detection model．The intrusion detection system based on mobile agent can chase the attacker and find the place，which the attacker exists， which cail solve the problem that the usual intrusion system can only response passively． The author puts forward a distributed intrusion detection system model based on mobile agent and protocol analysis．The intrusion detection system model according to the development situation of intrusion detection technology consists of three levels．The first level is central controllers．Tbe second 1evel is controllers．The third level consists of watcher agent，analysis agent,response agent,Irace agent．The mobile agents form a forest control stlalctllrc。Every sub-net which is controlled by control agent adopts diffexcnt intrusion detection analysis method．The thesis only argue the sub-net adopting the pattern matching and protocol analysis methods． One of the two critical researches of the thesis iS protocol analysis technology． Simple protocol analysis and protocol analysis based on state transition are two methods adopted by the model．The former detects if the relevant rules are satisfied by the data according to the protocol type．The latter detects the intrusion through the protocol states，which improves integration and precision ofthe detection． Another is mobile agent’S migration and communication．The migration policies are put forward．The communication algorithm’thou出，data structure and the steps are provided too．At last,the load balance policy is raised． Key wor