基于蜜網(wǎng)技術(shù)聯(lián)動性的研究與設(shè)計(jì).pdf

1、西南交通大學(xué)碩士學(xué)位論文基于蜜網(wǎng)技術(shù)聯(lián)動性的研究與設(shè)計(jì)姓名：張青軍申請學(xué)位級別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：馬永強(qiáng)20080701西南交通大學(xué)碩士研究生學(xué)位論文第lI頁AbstractHoneypottechnologyisanewmergingtechnologyinrecentyears，itisonekindofsecurityresources，whosevalueliesinbeingscanned，attackedan

2、dcompromisedHone)netiSasortofthefraudulentnetworkwhichdevelopedonthebasisoftheHoneypottechnologyAsanetworksystem，hone)netgenerallyconsistsoffirewall，intrusiondetectionsystem(IDS)，oneormorehoneypotmachines，butitcanalsobec

3、onstructedonaphysicalhostbyvirtualmachinesoRwaresSofarithadalreadyexperiencedfromthefirstgenerationofhone)nettechnologysecondgenerationofhone)nettechnologytothethirdgenerationhone)net’Sdevelopmentprocessonthehoneypottech

4、nologyevenpresentedthelarge—scaleHoneyFarmtechnologyButtheHone)netisonekindofnewtechnologyalsohasthelimitationsasothernewtechnologiesTheHone)netsystemhasthedisadvantageofinfirmnesslinkagebetweenhoneypot，firewallandIDS，wh

5、ichdoesnothaveselflearningcapabilitytotheintrusionrulesThisthesishasdesignedasortofnewhone)netsystemarchitectureinviewoftheproblem，thisarchitectureaddedthedataanalysismodule，anditalsoenablesthedeploymenthone)net’Sfunctio

6、ntoobtainthefulldisplayThisthesishassuccessfullydeployedahone)netsystem，whichmeetsapartfromthedatacontrol，thedatacapture，thedataanalysisdemandAndalsothedataanalysismoduleisrealizedwiththedataminingtechnologySpecificallyu

7、singtheclassicalnonsurveillanceclusteralgorithmofKMEANStocarryonthemarkclassificationspecificallytothedata，alsousingthesortingalgorithmofC45topickupintrusionruleofthedatawhichisalreadymarkedAnditwillkeeptheintrusionrulei

8、ntoIDSrulesets，thusrealizesthehone)net’SlinkageandthetrainingabilityinthetruesenseAtthesametime，whenrealizingthehoneynetsystemspecificallyThesystemhasdesignedthedifferentstoragepatternonthebasefullyconsideringtheloginfor