基于免疫机制的入侵检测系统分析与应用-计算机应用专业论文.docxVIP

II II 制生成系统来进行入侵检测。 本文主要从以下两个方面开展研究： （1）依照生物多层防御这一免疫特性，从而设计一个由固有检测 和自适应检测组成的入侵检测模型。入侵是从计算机网络或计算机系 统的关键点收集信息并进行分析，从中发现网络或系统中是否有违反 安全策略的行为和被攻击的迹象。论文在深入分析入侵本质的基础上， 研究了匹配算法、检测元算法以及Snort规则并进行精简与优化。对入 侵检测中较普遍应用的否定选择算法进行了改进，并设计了改进型的 检测元算法。 （2）在检测子算法的研究中，分析了传统检测子生成算法的优缺 点，应用随机检测子生成算法，并在此基础上引入二次耐受机制和变 异机制，提出一种新的随机检测子生成算法。并将改进后的算法应用 到入侵检测系统的研究之中，在Windows环境下使用Java语言实现其算 法，再以大量设计数据进行测试来证明随机检测子生成算法用于入侵 检测系统的有效性和可行性。 关键字:免疫机理，入侵检测，模型，生成算法 III III Abstract The issue comes from the Shanghai software company Sybases e-banking project, which is a web-based inter-bank program include transfer, bill pay, wire and so on. It relates to the large amount of sensitive data so network security has become an important issue. With the rapid growth of network, the growing ranks of Internet users and the network intrusion incidents are also increasing. Firewalls and other defensive technology have been difficult to stop the illegal invasion and can not effectively solve the problem of network security. Therefore, the network security technologies and new methods of research have drawn increasing attention. Intrusion detection system can detect intrusions by collecting and anglicizing intrusions and normal behavior of the difference. It found great majority of intrusions by appropriate security measures, such as alarm, record, cut or blocked, etc. Thereby enhancing the resilience of the network security is more necessary. Intrusion detection system as an information security safeguards, so that many scholars and researchers at home and abroad to start the research on intrusion detection systems and made a lot of research results. The paper has e-banking system as project background, to carry out research on intrusion detection technology. The existing intrusion detection systems at home and abroad have a brief comparative analysis of the existing intrusion detection system deficiencies. Then analyze the principle of biological immune system and its components. The immune system and intrusion dete