【作者】 秦海玉；

【导师】 汪文勇；

【作者基本信息】 电子科技大学 ， 计算机软件与理论， 2004， 硕士

【摘要】 在计算机网络迅猛发展的今天,网络入侵成的危害性越来越大。入侵检测技术是继“防火墙”、“数据加密”等传统安全保护措施后的又一种新的安全保障技术,它用于计算机和网络资源上的恶意使用行为进行识别和响应。利用人工免疫的思想和机制来解决网络入侵检测问题已经成为该研究领域的前沿课题。入侵检测系统和生物免疫系统具有相似的功能,后者为研究和开发入侵检测系统提供了一个自然的模板,成为我们仿真的对象。本课题的主要工作概括如下:介绍和总结了基于免疫原理的网络入侵检测系统的原理;建立了基于免疫原理的网络入侵检测系统的模型,并进行了分析和实现;深入分析了漏洞的产生原因;采用移动代理的编程技术仿真生物免疫系统;引入特异性检测概念,改善了动态选择算法。最后,本文对整个研究工作进行了总结,并展望了下一步的工作。基于免疫原理的网络入侵检测系统是一个新的研究领域,其中很多新方法、新机制值得我们去研究和探索。更多还原

【Abstract】 Nowadays, network intrusion detection has become more and more important problem with the fast development of computer networks. The Intrusion Detection is a new security technology, apart from traditional security technologies, such as firewall and data cryption. IDSs watch the computers and network traffic for intrusive and suspicious activities.The approaches based on artificial immunology has become the foreland in this field. Intrusion Detection System (IDS) has similar function with immune systems. The later provide a natural template for IDS. The primary contributions of the dissertation are as follows:Introduction of theory of the network intrusion detection based on Immunology (IBNIDS);Establishment, analysis and achievement of the model of the IBNIDS;Analysis of the reason of the hole;Using the mobile agent programming technology;Improve the performance of the arithmetic by using the monospecificity detection.Lastly, the dissertation summarized all the research work mentioned above and discusses the next work in this field.Network intrusion detection based on immunology is a new studying field in which there are many new methods and mechanisms worthy of studying and exploring.更多还原