基于蜜網技術聯動性的研究與設計.pdf

1、西南交通大學碩士學位論文基于蜜網技術聯動性的研究與設計姓名：張青軍申請學位級別：碩士專業(yè)：計算機應用技術指導教師：馬永強20080701西南交通大學碩士研究生學位論文第lI頁AbstractHoneypottechnologyisanewmergingtechnologyinrecentyears，itisonekindofsecurityresources，whosevalueliesinbeingscanned，attackedan

2、dcompromisedHone)netiSasortofthefraudulentnetworkwhichdevelopedonthebasisoftheHoneypottechnologyAsanetworksystem，hone)netgenerallyconsistsoffirewall，intrusiondetectionsystem(IDS)，oneormorehoneypotmachines，butitcanalsobec

3、onstructedonaphysicalhostbyvirtualmachinesoRwaresSofarithadalreadyexperiencedfromthefirstgenerationofhone)nettechnologysecondgenerationofhone)nettechnologytothethirdgenerationhone)net’Sdevelopmentprocessonthehoneypottech

4、nologyevenpresentedthelarge—scaleHoneyFarmtechnologyButtheHone)netisonekindofnewtechnologyalsohasthelimitationsasothernewtechnologiesTheHone)netsystemhasthedisadvantageofinfirmnesslinkagebetweenhoneypot，firewallandIDS，wh

5、ichdoesnothaveselflearningcapabilitytotheintrusionrulesThisthesishasdesignedasortofnewhone)netsystemarchitectureinviewoftheproblem，thisarchitectureaddedthedataanalysismodule，anditalsoenablesthedeploymenthone)net’Sfunctio

6、ntoobtainthefulldisplayThisthesishassuccessfullydeployedahone)netsystem，whichmeetsapartfromthedatacontrol，thedatacapture，thedataanalysisdemandAndalsothedataanalysismoduleisrealizedwiththedataminingtechnologySpecificallyu

7、singtheclassicalnonsurveillanceclusteralgorithmofKMEANStocarryonthemarkclassificationspecificallytothedata，alsousingthesortingalgorithmofC45topickupintrusionruleofthedatawhichisalreadymarkedAnditwillkeeptheintrusionrulei

8、ntoIDSrulesets，thusrealizesthehone)net’SlinkageandthetrainingabilityinthetruesenseAtthesametime，whenrealizingthehoneynetsystemspecificallyThesystemhasdesignedthedifferentstoragepatternonthebasefullyconsideringtheloginfor