基于蜜网技术的校园网络安全系统的设计及研究

发布时间：2018-03-11 10:08

本文选题：网络安全　切入点：主动防御　出处：《湖北工业大学》2017年硕士论文　论文类型：学位论文

【摘要】：现如今,网络已经得到了极大的普及,并深入到人们生活的各个方面。在校园中,网络建设水平也得到了不断的提高,为学校各项教育教学活动的开展以及广大师生的学习生活等都提供了极大的便利。但是,校园网络安全问题已经成为一个全社会广泛关注的重要问题。本次研究即围绕这一热点展开研究,并在具体的研究过程中立足校园网络的实际情况和特点,基于蜜网技术进行系统开发。通过对系统相关问题的分析,保证系统的实用性和科学性等。研究在了解蜜网技术的基础上,结合校园网络安全现状,基于蜜网技术对相关校园网络安全系统进行设计,把防火墙自带的网桥功能,应用到外部网络和桥接蜜罐网络中去,然后利用安全检测技术对可能入侵的网络进行检测,以此获取和捕获相关数据,及时处理攻击事件。同时,对攻击者在蜜罐上的活动利用Sebek进行捕获。然后利用获取的日志,对所需要的防护信息进行不断的积累,从此提高整个系统的安全防护能力。研究设计出包含多个模块的校园网络安全系统。并通过系统测试,明确了不同模块的功能和应用效果等。通过对不同系统的测试结果进行分析发现,每个系统都能够很好的发挥出自身的防御功能,同时可以获取相应的日志,这些获取的日志可以为以后系统的优化改进提供很好的数据支撑,从而提升系统对数据的捕获收集能力。这种防御模式可以很大程度上提高整个校园网的安全性能,防止攻击性网络的入侵,为整个校园网络提供一个安全可靠的学习环境。通过本次研究发现,现如今校园网络安全存在一定的问题,所以如何保证校园网络的安全性显得非常重要。采用蜜网技术对校园网络的安全性能进行设计时,要注意结合系统的基本需求和相关功能需求,并积极的进行系统实现和测试。本次研究也可以为不同学校校园网络安全系统的具体开发和实施等提供一定的参考,以更好的促进校园网络安全水平的提高。
[Abstract]:Nowadays, the network has been greatly popularized, and has penetrated into all aspects of people's lives. In the campus, the level of network construction has also been continuously improved. It has provided great convenience for all kinds of educational activities and the study and living of teachers and students. However, The security of campus network has become an important issue that the whole society pays close attention to. This research focuses on this hot spot, and bases itself on the actual situation and characteristics of campus network in the specific research process. The system is developed based on Honeynet technology. Through the analysis of the related problems of the system, the practicability and scientific nature of the system are guaranteed. On the basis of the understanding of Honeynet technology, the present situation of campus network security is combined. Based on Honeynet technology, the related campus network security system is designed. The network bridge function of the firewall is applied to the external network and the honeypot network, and then the possible intrusion network is detected by using the security detection technology. At the same time, the Sebek is used to capture the activities of the attacker on the honeypot, and then the log is used to accumulate the necessary protection information. From then on, the security protection ability of the whole system is improved. A campus network security system containing multiple modules is designed and tested. Through the analysis of the test results of different systems, it is found that each system can play its own defense function very well, and can obtain the corresponding log at the same time. These acquired logs can provide good data support for future system optimization and improvement, thereby enhancing the system's ability to capture and collect data. This defense model can greatly improve the security performance of the entire campus network. To prevent the intrusion of the offensive network and to provide a safe and reliable learning environment for the whole campus network. Through this study, we found that there are certain problems in the security of the campus network nowadays. Therefore, how to ensure the security of campus network is very important. When using Honeynet technology to design the security performance of campus network, we should pay attention to combining the basic needs of the system with the related functional requirements. And actively carry out the system implementation and testing. This study can also provide a certain reference for the specific development and implementation of the campus network security system in different schools in order to better promote the improvement of campus network security level.
【学位授予单位】：湖北工业大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】