基于關(guān)聯(lián)技術(shù)的入侵檢測的研究

1、南昌大學(xué)碩士學(xué)位論文基于關(guān)聯(lián)技術(shù)的入侵檢測的研究姓名：肖莽申請學(xué)位級別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：程從從20100107ABSTRACTABSTRACTWiththerapiddevelopmentofnetworktechnology，networksecurity，occupyallincreasinglyimportantpositionsimplepassivestaticsecurityanddefensepolicy

2、hasbeenunabletofulfillcurrentrequirementwhilethedynamicdefensiveintrusiondetectionsystemastechnologyevolvesgraduallyshowoutitsadvantages，butalsoexposedsomequestions，suchasthehighrateoffalsealarmrateandomissions，contextis

3、notclearandSOonseriouslyaffecttheperformanceofintrusiondetectionsystemsandtheirapplicationsAddressingtheseshortcomings，weanalysistheintrusiontechnologyandthenproposedasystembasedoncausalcorrelationandinthissystemassociat

4、edwithfalsenegativecorrelationisimprovedFirstlythispaperintroducestheknowledgeofintrusiondetectionsystem，including：intrusiondetectionsystem，thebasicmodel，workingmodel，classificationstructureanddeploymentSecondlythedetail

5、softhecorrelationanalysistechniques，includingtheinvasionoftechnologyindepthanalysis，probabilitycorrelationmethods，andbasedondataminingmethodsassociatedwithabriefintroductiontheprincipleofcausalcorrelationthedefinitionofp

6、rerequisiteandconsequence，aswellasintrusiondetectionsystemarchitectureThirdly，onthecausalcorrelationmethodassociatedwiththealertfalsenegativequestionproposedfalsenegativecorrelationmethods，includingthedefinitionofHyperal

7、ertcorrelationrulegeneration，andalgorithmdescriptionThenputforwardtheintrusiondetectionsystem’Sdesignarchitecturesbasedonthecausalcorrelationandsystemprocesses，andthatthesystemisdividedintoalertmessagepreprocessingmodule

8、，aggregationmodule，causalcorrelationanalysismodule，responsemodulefourblocksFinally，usiI培VCtoachieveanimprovedsystemmodel，andsimulatenetworkintrusionincidentonthesystemtoattackthecompletionofalargenumberoftestinglaborator