【摘要】：當(dāng)前，物理隔離技術(shù)已成為網(wǎng)絡(luò)安全保密體系中不可或缺的重要手段。然而美國(guó)國(guó)防部提出的“離線攻擊”技術(shù)，讓與互聯(lián)網(wǎng)物理隔離的局域網(wǎng)系統(tǒng)不再高枕無憂。穩(wěn)定安全的物理隔離網(wǎng)絡(luò)入侵檢測(cè)系統(tǒng)是保密工作者迫切需要的，對(duì)于網(wǎng)絡(luò)安全保密體系也具有重要的理論與實(shí)際意義。 本文通過分析入侵檢測(cè)等已有的網(wǎng)絡(luò)防護(hù)技術(shù)的不足以及對(duì)新型“離線攻擊”手段進(jìn)行了分析和研究，提出了通過對(duì)關(guān)鍵主機(jī)節(jié)點(diǎn)及周邊通信鏈路數(shù)據(jù)包流量、無線電頻譜等數(shù)據(jù)的監(jiān)測(cè)，，建立一種新型的分布式無線入侵檢測(cè)系統(tǒng)。首先，本文引入無線電多頻點(diǎn)監(jiān)測(cè)干擾網(wǎng)絡(luò)，將其部署在物理隔離網(wǎng)絡(luò)外圍，起到外層監(jiān)測(cè)以及后期干擾作用。其次，引入關(guān)鍵節(jié)點(diǎn)概念，文中設(shè)計(jì)方案中對(duì)物理隔離網(wǎng)絡(luò)中各節(jié)點(diǎn)量化后按照重要性采取不同的策略，提出新的監(jiān)測(cè)算法策略，對(duì)攻擊行為進(jìn)行等級(jí)劃分，計(jì)算出潛在損失值，而本方案將監(jiān)測(cè)重點(diǎn)放在關(guān)鍵節(jié)點(diǎn)上，能夠在收集到更有針對(duì)性數(shù)據(jù)的同時(shí)降低自身能耗。最后，論文將通過仿真技術(shù)驗(yàn)證雙層網(wǎng)絡(luò)中基于關(guān)鍵節(jié)點(diǎn)監(jiān)測(cè)的分布式入侵檢測(cè)方案具有更高的檢測(cè)正確率，很好地實(shí)現(xiàn)了對(duì)網(wǎng)絡(luò)攻擊監(jiān)測(cè)的功能。
[Abstract]:At present, physical isolation technology has become an indispensable and important means in network security and security system. However, the "offline attack" technology proposed by the US Department of Defense makes the LAN system physically isolated from the Internet no longer rest easy. The stable and secure physical isolation network intrusion detection system is urgently needed by the security workers, and also has important theoretical and practical significance for the network security system. By analyzing the shortcomings of the existing network protection technology, such as intrusion detection, and analyzing and researching the new "off-line attack" method, this paper puts forward that the packet traffic of the key host node and its surrounding communication link is analyzed and studied. A new distributed wireless intrusion detection system is established by monitoring radio spectrum and other data. Firstly, the radio multi-frequency monitoring jamming network is introduced and deployed on the periphery of the physical isolation network, which plays the role of outer monitoring and late interference. Secondly, the concept of key nodes is introduced. After quantization of each node in the physical isolation network, different strategies are adopted in the design scheme, and a new strategy of monitoring algorithm is put forward to classify the attack behavior. The potential loss value is calculated, and the monitoring is focused on the key nodes, which can reduce the energy consumption while collecting more targeted data. Finally, the paper verifies that the distributed intrusion detection scheme based on critical node monitoring in double-layer network has higher detection accuracy, and realizes the function of network attack monitoring.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 李慧芬;;網(wǎng)絡(luò)入侵檢測(cè)技術(shù)淺析[J];電腦知識(shí)與技術(shù);2011年04期

2 胡靜;;基于OPNET的無線傳感器網(wǎng)絡(luò)仿真[J];電氣電子教學(xué)學(xué)報(bào);2006年06期

3 禹曉慶;網(wǎng)絡(luò)物理隔離安全防御技術(shù)[J];中國(guó)電子出版;2000年06期

4 張偉偉;王俊;秦琳琳;吳剛;;基于NS2的無線傳感器網(wǎng)絡(luò)仿真平臺(tái)設(shè)計(jì)[J];電子技術(shù);2009年10期

5 張金存;喬欣;;試論“計(jì)算機(jī)中心戰(zhàn)”[J];國(guó)防科技;2013年03期

6 薛楠;周賢偉;辛?xí)澡?李丹;楊楨;;一種解決認(rèn)知無線電網(wǎng)絡(luò)模仿主用戶攻擊問題的方案[J];計(jì)算機(jī)科學(xué);2009年08期

7 胡華平,陳海濤,黃辰林,唐勇;入侵檢測(cè)系統(tǒng)研究現(xiàn)狀及發(fā)展趨勢(shì)[J];計(jì)算機(jī)工程與科學(xué);2001年02期

8 毛劍琳;吳智銘;;無線傳感器網(wǎng)絡(luò)仿真系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[J];計(jì)算機(jī)仿真;2006年06期

9 劉發(fā)龍;;計(jì)算機(jī)網(wǎng)絡(luò)入侵檢測(cè)技術(shù)概述[J];科技廣場(chǎng);2010年06期

10 陳佩劍;楊岳湘;唐川;;基于信任度量機(jī)制的分布式入侵檢測(cè)系統(tǒng)[J];山東大學(xué)學(xué)報(bào)(理學(xué)版);2011年09期

相關(guān)博士學(xué)位論文 前2條

1 白媛;分布式網(wǎng)絡(luò)入侵檢測(cè)防御關(guān)鍵技術(shù)的研究[D];北京郵電大學(xué);2010年

2 余修武;礦井安全智能監(jiān)測(cè)無線傳感器網(wǎng)絡(luò)關(guān)鍵技術(shù)研究[D];武漢理工大學(xué);2013年

本文編號(hào)：2301872