利用動態(tài)規(guī)則集和協(xié)議分析提高入侵檢測效率.pdf

1、華中科技大學碩士學位論文利用動態(tài)規(guī)則集和協(xié)議分析提高入侵檢測效率姓名：許傳明申請學位級別：碩士專業(yè)：計算機應用技術指導教師：路松峰20060428華中科技大學碩士學位論文IIAbstractWiththepopularizationofthewktheincreasingofhackerswksecuritybecomesmemeimptant.Intrusiondetectionameasurefmonitingthesystemse

2、curityisbecomingoneofthemostimptanttechnologiesfmaintenanceofwksecurity.Usuallyintrusiondetectionsystemgathersdatapacketthenmatchesthepatternifthematchingsuccessfulitshowsthattheintrusionhashappened.Alongwiththedevelopme

3、ntofthewkintrusionithastoincreasesomerulestoperfecttheruleset.Theinflationofrulesettheincreaseofwkbwidthmakethesystemcannothlewitheverydatapacketithastosomedatapacketsfailtorepttheintrusioninthatpedpacketsoitcausestherat

4、eoffailreptbecomingincreased.Thisisthebottleneckofintrusiondetectionsystem.FsolvingthisbottleneckloweringtherateoffailreptbaseonthedynamicrulesetprotocolanalysiswedesignedaneventanalyzerontheprincipleofCommonIntrusionDet

5、ectionFramewk.Adynamicruleadjustmentstrategyisestablisheditcanacquirethecurrentwkbwidththesystemcapabilitythenadjustthescopeofrulesetaccdingtosomehomologousstrategycombinedwiththeprotocolanalysisitalsoclassifiestherulese

6、tsoitcandecreasethescopeofrulesetofthepatternmatching.Intheprocessofpatternmatchingaccdingtotheprobabilitymechanismitmatchesthoserulewhichappearfrequentlyfirstlythenmatchesthoserulewhichappearseldomsecondlysoitcanreducet

7、heaveragematchtimeofthedatapacket.Itcanmakesystemresourcesbemadebestuseitalsomakesintrusiondetectionsystemgetbetterperfmanceatcurrentwkbinedwithsntwhichisasmallintrusiondetectionsystemthateventanalyzerisrealizedthearchet

8、ypalsystemisgiven.Atlastwetestthisarchetypalsystemdrawaconclusionthatusingdynamicrulesetprotocolanalysiscanimprovingtheefficiencyofintrusiondetection.Keywds:IntrusionDetectionPatternMatchingDynamicRuleSetProtocolAnalysis