基于主动对抗响应的网络入侵检测模型-计算机应用专业论文.docxVIP

奎墨型!!叁翌堕±堡茎 奎墨型!!叁翌堕±堡茎一 P恕溉堡!：圭垫型妻型!型旦盟塑仝堡竺塑!茎竺络入幽舢， 基于主动对抗响应的网络入侵检测模型 摘要 随着互联网的迅猛发展，网络离我们越来越近，数字化程度也越来 越高，伴随肌米的是网络的安全问题也越来越重婴。I)。!|络蜜全二l三要威胁 来自于网络黑客的攻击、计算机病毒和拒绝服务，山于网络入侵者的活 动非常难以检测和纠正，网络攻击造成的象件、财产和，台誉损失难以估 计，网络安全已经成为制约网络发展的瓶颈。现有的入侵检测系统对检 ImI-I!-I的入侵行为的所采取的措施都局限于被动的、本地的I响应措施，而 缺乏主动的、广域阐范围内的反击措施，因此都属于被动响应恻络入侵。 尽管这些措施在反击网络入侵中扮演着重要的角色，然而并不能有效地 解决问题的根本原因一定位并从根本上制止入侵者。因此，建立一种高 效、实时的主动入侵响应，已势在必行。在本论文。p，我们提出了基于 主动对抗响应的网络入侵检测模型。该模型在传统入侵检测系统的先 进、成熟的技术基础上，引入对入侵者的主动追踪定位，一旦入侵检测 部件检测到有入侵行为或企图的发生，除了本地的简单响应外，还以 SWT(Sleepy Watermark Tracing)为基础，对于攻击路径上跳板石 (Stepping Stones)进行追踪定位，从而动念地在入侵源端发起如远 程阻塞或隔离等对抗性策略，从根本上阻止入侵者的后续攻击，大大提 高了网络系统的安全性。 关键词网络安全，网络入侵检测，主动对抗响应，入侵追踪，SWT 查璺堡!：叁堂堡±堡兰 查璺堡!：叁堂堡±堡兰 ．苎!主型型堕堕!生塑堕!坠!型塑!!堡旦 NETWORK INTRUSION DETECTION MODEL BASED ON ACTIVE COUNITERWORK RESPONSE ABSTRACT With the rapidly development of Intemet in recently years,the network comes to US more and more closely,and our life is higMy digitalized． Simultaneously,network security becomes much more important because of the threat coming from hacker,computer virus and deniaI of service．The hacker’s activity jS hard Co be detected and eounterwo,rk：ed．and the result of the hacker’S attack iS SO grievous．The problem of network security has been the bottleneck of the development of Internet．The existing Intrusion Detection Systems mostly WOrk in a“passive”mode in response tO network．based iintrusions．SO their countermeasures are limit locally and negatively iin the jntruded networks．So there iS no active．WAN--,,vide counteraction against detected intrusion．Wbile they all play all important ro／e jn counteracting network．based】intrusion．they do not．however, effectively address the root cause of problem，locating and deterring intruders．Therefoqe．ILt iS urgent to build a high,ter effective．real．-time and active．intrusion response system． Jn让ds paper,a new model【of netwoJ,rk jntrusion detection based on active counterwork response iS proposed It utilizes existing IDS advanced and matured technologies，and import