联动式主机安全防护系统研究-计算机系统结构专业论文.docxVIP

摘 摘 要 随着计算机网络的飞速发展，网络在提供开放和共享资源的同时，也不可避免地存在 着安全风险。网络安全问题尤其是内网安全问题已经引起人们的广泛关注，并成为当前网 络技术研究的重点。解决主机安全问题也已成为内网安全问题解决的首要途径。目前}B现 了多种主机安全防护技术，并且很多都得到了广泛的应用，其中主机防火墙和主机入侵检 测是应用最广泛的两种技术，但这两种安全技术在单独使用时都存在着缺陷。本课题研究 的主要内容就是如何综合利用多种主机安全防护技术，构建多层次一体化的主机安全防护 系统。 本文首先对主机防火墙和主机入侵检测技术进行了深入了分析和总结，指出了两者的 优、缺点。在此基础上，提出了以联动控制台为核心，将主机防火墙与主机入侵检测等多 种安全技术以间接联动的方式构建联动式主机安全防护系统的设计思想，给出了系统模型 和组成结构；设计和实现了联动控制台，并给出了终端主机防火墙子系统和主机入侵检测 予系统的设计。为了提高系统的可靠性、安全性和效率，本文还提出基于入侵报警的两级 关联分析模型。在此基础上构造了基于关联分析的联动模型。最后对本文的工作和今后进 一步研究的问题进行了总结和展望。 关键词：主机防火墙；主机入侵检；9i|f系统；荚联努析；联动技术 第1II页 信息r程大学硕士学位论文ABSTRACT 信息r程大学硕士学位论文 ABSTRACT With the fast development of the computer network，there inevitably potential security problems while the Internet is providing open shared resollrces The security probletDS of、the network have become focus of attention，also do the security of Intranet especially．’Fhe chief approach which resovle the security problems of the Intranet is thc securit5 ofhost At present，there comes various security technologies ofhost，and many ol、them get abroad application，and Host Firewall and Host Intrusion Detection are the two technol【aries that areapplied most comprehensive，but the two security technologies have defects when they are used alone The main content we will research in this task is how to utilize these two more security technologies synthetical to build muttilayer and incorporate defense system of host． In this paper，we analyze the Host Firewall and Host Intrusion Detection technology deeply and summarize their advantage and disadvantage．On the basis ofthis，we put forward the idea that take the cooperative console as the kernel，build an dynamic adaptive security defense system through combining the Host Firewall and Host Intrusion Detection in indirect way， present the model and structure ofthe system；design and implemem the cooperative console， and also give out the design ofthe Host Firewall and Host Intrusion Detection．In order to improve the reliability、security and the efficiency ofthe sy