基于流量分析的網(wǎng)絡安全系統(tǒng)研究.pdf

1、北京工業(yè)大學碩士學位論文基于流量分析的網(wǎng)絡安全系統(tǒng)研究姓名：李鵬申請學位級別：碩士專業(yè)：計算機應用技術指導教師：肖創(chuàng)柏20090201Abstract●lll_●lI—II●●I■，曼■!粵AbstractAtthesametime，therapiddevelopmentofIntemet，networksecurityissuesisbecomingincreasinglYseriousViruses，maliciousattacks

2、，unauthorizedaccesstonetworksarevulnerabletotheimpactofnormaloperationNetworkdesign，andbuilderswillhaveavarietyofnetworkdefensetechnologiesappliedtonetworksecuritymanagementsystem。formedtheIntrusionDetectionSystemfNIDS)I

3、textendsthesystemtheadminisgatorssecuritymanagementcapabilitiestohelpthesystemtodealwithnetworkattacksimprovetheinformationsecurityinfrastructureintegrityarereasonablefirewalladdedIntrusionDetectionisanattempttoinvasion，

4、theongoinginvasionorintrusionhasoccurredtoidentifytheprocess，whichfocusedonthesurveillanceandprotectionnetworkFlowmonitotingsystemiSoneofakindofanalysisaileffectivewaytonetworkconditions，Whichisbasedonnetworkpacketasalli

5、nformationsourceIntrusionDetectionSystem，fromtheperspectiveofpackettrafficanalysis，throughrealtimecollectionandsurveillancenetworkpacketinformationtocheckwhetherinviolationofsecuritypolicybehaviorandsignsofabnormalnetwor

6、kThisarticlecomparesseveralcommonnetworktrafficanalysissoftwareandnetworkbasedIntrusionDetectionSystemflowofdesignideasThiSpaperputsforwardaNetworkIntrusionDetectionSystembasedonSnort(snifferandmore)Snortisonepowerfullig

7、htwei曲tnetworkIDSIthastheabilityofrealtimedataanalyingandrecordingIPnetworkdatapacketsanditcanbeabletoprocessprotocolalsoCandetectmanyanalyzing，differentdefinitecontentsearchingormatchingSnortalsoCandetectmanydifferentwa

8、ys，andthengivearealtimeala／n1Furthermore，SnorthasgoodexpansibilityandtransabilityInthisPap％IfirstlydescribetheSnort’Sarchitecture，workingflowandthreedimensionallinkedlistandthenespeciallyanalyzetheDetectionEngineoftheSno

9、rtandtheDetectionEngine’SpatternmatchingalgorithmsThiSarticlecomparesseveralconlmonnetwork仃amCanalysissoftwareandnetworkbasedintrusiondetectionsystemflowdesigntheuseofnetworktra筒CmonitoringandanalysissoftwareSnortPHPApac

10、heMySqlsetupnetworkintrusiondetectionsystemToSnortmonitoringnetworktra伍CwillmonitorthedatarecordedintheMySqldatabase，inACIDandPHPgeneratedpagesintuitivegraphicalinterfaceforrealtimenetworkadministratorstomasterthecurrent

11、networkstateCompletesystemconfiguration，theexperimentalenvironmentusedtodetectvariousfclrmsofinvasioneigenvalueOnthisbasis，thefocusonresearchandanalysissoftwareSnortrulesetoptimizationalgorithmideasandprogramsandcampusne