基于移动代理的入侵检测系统研究-计算机应用专业论文.docxVIP

山东大学硕士学位论文ABSTRACT 山东大学硕士学位论文 ABSTRACT Intrusion detection is a very importallt field in net、vork security谢th high-speed development．It’s one of the kemel technology of net、^帕rk securi够．It not only can detect the outside intmsion action but also call find out the unauthorized actiVity inside the network It protects intemal network togemer、vim firewall aIld锄ti—vinls tools．In the past twen哆five years，intrusion detection developed fast，from host—b嬲ed intmsion detection system，to network-based intmsion detection system，aJld to hybrid distributed intmsion detection system． 0ne problem is t量lat the detection technology of the traditional IDS has lots of limitation．IrI the face of more a11d more rampant network intrusion，the ability of IDS isn’t equal to its锄bition．In this paper’the main work is to design a simple IDS amet)rpe based on mobile agent throu曲making use ofⅡ)Kl 3．1，ObjectSpace a11d Voyager 0RB【16】for exploitation．At the same time，I had eXperimentalized to validate this antetype． Paper introduces the model of IDS and its related technologies Then，designs a simple mS based on me technology of mobile Agent，a芏ld realizes its basic function耐ttl Java 1anguage b船ed on Voyager 0RB The model of IDS is made up of a m锄agement moduIe，a data collection modllle，a data analysis module锄d MAE，data collection module is tlle core of the IDS，it is finished by Agent．At the process of designing aboIn Agem，adopts SFT and CPN two modules．Firstly，The system intmsion is tumen into SFT description．Then，SFT description is tumed into CPN model．An intmsion detection is corresponded to a CPN model，each pact of this CPN model corresponds to the mobile agent and immobile agent，a11d Agent is designed on the operational principle of the CPN．At the process of realizing this system，data collection is finished by Snort，data analysis is finished by Agent abstract class， Agent realizable class is used to finishing specific intrusion detection．At laSt，we have a b“ef test about our IDS，the reslllt is sa