入侵检测与防御系统的研究与实现

发布时间：2018-09-01 21:16

【摘要】：当前,伴随科学技术的不断发展,计算机信息技术已经得到了显著的提高,并被广泛的应用在社会生产和人民生活中的各个环节。与此同时,网络安全领域也成为涉及影响国家安全发展和关系到百姓生活的的重点领域。传统安全防御技术如防火墙、入侵检测IDS等技术已经普遍应用在网络安全的各个领域。然而这些技术中存在大概率的漏报和误报现象、检测效率低下、联动协作性差、智能性不高等不足问题,因此缺乏对网络全面的保护能力,为此,提出了一个满足实际需求的的网络安全防御技术多种技术优势相结合的防御体系是本文的主要任务。本文首先陈述了防火墙在网络安全领域的应用情况和发展方向、介绍了被动式的网络安全入侵检测技术IDS分类及其存在的问题。接着介绍了入侵防御技术IPS相关技术的分类,论述了各自的优缺点。分析了当前网络安全领域防御技术的类别及存在技术问题,探讨这些分类的各自优缺点。最后,对现有安全防御系统分别进行初步的总体设计和详细设计,在此设计结束后进行系统的实现和测试过程,同时举例开展仿真实验和测试。本文研究的创新点及最终的成果包括:(1)在前期研究基础上设计了一套协同检测、联动防御的的网络防御综合解决方案。(2)结合了入侵检测、防火墙技术、入侵防御技术等传统技术,搭建了各自的数据通信和分组交换的桥接通道,提升和实现系统的交互性和扩展性。(3)在现有网络安全模型的理论基础上设计了一个合作式的防御模型,以此实现了一个协同作业、联动合作的入侵防御系统。经过仿真测试证明,该系统具备较好的市场应用价值。
[Abstract]:At present, with the continuous development of science and technology, computer information technology has been significantly improved, and has been widely used in social production and people's life in all aspects. At the same time, the field of network security has become a key area which affects the development of national security and the life of the common people. Traditional security defense technologies, such as firewall, intrusion detection IDS and so on, have been widely used in various fields of network security. However, there are some problems in these technologies, such as high probability of false alarm and false alarm, low detection efficiency, poor linkage and cooperation, low intelligence and so on. Therefore, there is a lack of comprehensive protection ability to the network. It is the main task of this paper to put forward a defense system which can meet the practical requirements of network security defense technology, which combines the advantages of multiple technologies. This paper first describes the application and development direction of firewall in the field of network security, and introduces the passive network security intrusion detection technology (IDS) classification and its existing problems. Secondly, the classification of intrusion prevention technology (IPS) is introduced, and their advantages and disadvantages are discussed. This paper analyzes the categories and existing technical problems of current defense technologies in the field of network security, and discusses their respective advantages and disadvantages. Finally, the present security defense system is designed and designed in detail. After the design is finished, the system implementation and test process are carried out. At the same time, simulation experiments and tests are carried out with examples. The innovations and final achievements of this paper are as follows: (1) based on the previous research, a set of cooperative detection, linkage defense network defense comprehensive solution is designed. (2) combined with intrusion detection, firewall technology, Traditional technologies, such as intrusion prevention technology, have built their own bridging channels for data communication and packet switching. Enhance and realize the interaction and expansibility of the system. (3) based on the existing network security model, a cooperative defense model is designed to implement a cooperative and cooperative intrusion prevention system. The simulation results show that the system has good market application value.
【学位授予单位】：南昌航空大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】