基于危險(xiǎn)感知的免疫入侵檢測技術(shù)研究

1、華中科技大學(xué)碩士學(xué)位論文基于危險(xiǎn)感知的免疫入侵檢測技術(shù)研究姓名：李莎申請學(xué)位級(jí)別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：黃曉濤20070126華 中 科 技 大 學(xué) 碩 士 學(xué) 位 論 文 華 中 科 技 大 學(xué) 碩 士 學(xué) 位 論 文IIAbstract With the increasing popularity of the Internet and the spread of Internet viruses and hackers

2、, Internet security problems have become increasingly prominent. Intrusion detection technology is a research hotspot in the area of computer security. The intrusion detection technology based on the principle of immune

3、is a new research direction, and it provides a more proactive security protection mechanism. Some problems are found in the in-depth study of its development, such as the demarcation between “self“ and “nonself“ is too o

4、bvious, which may lead to the mistaken identification, and the real-time pattern recognition will also bring down the computer performance. The emergence of danger theory brought some inspiration to address these proble

5、ms. The object recognition of danger theory is “danger”, and it is more reasonable to recognize “danger” than “nonself”. Based on dividing danger levels, it could pose a soft border a between “danger” and “security”, and

6、 thus, it could reduce false identification. How to detect dangers is the key problem that should settled when danger theory is applied into intrusion detection. From the perspective of computer systems parameters, dange

7、rs could be detected through extracting the parameters and computing. It is planed to use a tool of describing the uncertainty – Cloud Model, to map between the seriate quantitative system parameters and danger level whi

8、ch is a qualitative concept. According to a priori detection rules, Cloud rules generator could be used to handle seriate system parameters for different concepts in order to produce danger signals of different levels. C

9、orrelated algorithms are presented. On the basis of the danger detection, some improvement is made to the traditional immune based intrusion detection technology, and a danger detection is added before the “self/nonself“