基于關聯技術的入侵檢測的研究

1、南昌大學碩士學位論文基于關聯技術的入侵檢測的研究姓名：肖莽申請學位級別：碩士專業(yè)：計算機應用技術指導教師：程從從20100107ABSTRACTABSTRACTWiththerapiddevelopmentofnetworktechnology，networksecurity，occupyallincreasinglyimportantpositionsimplepassivestaticsecurityanddefensepolicy

2、hasbeenunabletofulfillcurrentrequirementwhilethedynamicdefensiveintrusiondetectionsystemastechnologyevolvesgraduallyshowoutitsadvantages，butalsoexposedsomequestions，suchasthehighrateoffalsealarmrateandomissions，contextis

3、notclearandSOonseriouslyaffecttheperformanceofintrusiondetectionsystemsandtheirapplicationsAddressingtheseshortcomings，weanalysistheintrusiontechnologyandthenproposedasystembasedoncausalcorrelationandinthissystemassociat

4、edwithfalsenegativecorrelationisimprovedFirstlythispaperintroducestheknowledgeofintrusiondetectionsystem，including：intrusiondetectionsystem，thebasicmodel，workingmodel，classificationstructureanddeploymentSecondlythedetail

5、softhecorrelationanalysistechniques，includingtheinvasionoftechnologyindepthanalysis，probabilitycorrelationmethods，andbasedondataminingmethodsassociatedwithabriefintroductiontheprincipleofcausalcorrelationthedefinitionofp

6、rerequisiteandconsequence，aswellasintrusiondetectionsystemarchitectureThirdly，onthecausalcorrelationmethodassociatedwiththealertfalsenegativequestionproposedfalsenegativecorrelationmethods，includingthedefinitionofHyperal

7、ertcorrelationrulegeneration，andalgorithmdescriptionThenputforwardtheintrusiondetectionsystem’Sdesignarchitecturesbasedonthecausalcorrelationandsystemprocesses，andthatthesystemisdividedintoalertmessagepreprocessingmodule

8、，aggregationmodule，causalcorrelationanalysismodule，responsemodulefourblocksFinally，usiI培VCtoachieveanimprovedsystemmodel，andsimulatenetworkintrusionincidentonthesystemtoattackthecompletionofalargenumberoftestinglaborator