入侵預防與遠端保護系統

Tunghai University Institutional Repository > 工學院 > 資訊工程學系所 > 碩士論文 > Item 310901/1532

請使用永久網址來引用或連結此文件: http://140.128.103.80:8080/handle/310901/1532

題名:	入侵預防與遠端保護系統
其他題名:	Intrusion Prevention and Remote Protection System
作者:	李志揚 Li, Zhi-Yang
貢獻者:	呂芳懌 Leu, Fang-Yie 東海大學資訊工程學系
關鍵詞:	阻斷攻擊;分散式阻斷攻擊;入侵偵測系統 DDoS;IDS;Inner Attack
日期:	2009
上傳時間:	2011-03-02T03:27:31Z (UTC)
摘要:	近年來，許多人透過網站來獲取有用的資訊、收發電子郵件、購物等等。網路對我們日常生活已經是不可或缺的。在我們利用網路方便的同時，有許多威脅，像是阻斷攻擊或分散式阻斷攻擊，來破壞網路系統，導致企業或公司財務上的損失。目前有許多入侵偵測系統發展出來保護網路系統，但有時候面對大量的攻擊時，難免會失去它們的偵測能力。本研究提出一個入侵預防系統，利用Cumulative Sum演算法來偵測從本地端或遠端的攻擊。此系統不僅可以偵測外出網域與轉送的封包來保護遠端重要的系統，也可以偵測進入網域與送往相同網域的內部封包來保護自身網域的安全。實驗結果顯示此系統在防禦環境下可以帶來更高的安全性。 In recent years, networks are essential particularly for our daily life. More and more people access useful information, receive e-mail, purchase high-tech products, etc., through websites. However, when we enjoy network convenience, networks on the contrary also conduct threats for us, like Denial of Service (DoS) and Distributed Denial of Service (DDoS), resulting in bringing us inconvenience or financial loss, e.g., enterprises or companies’ huge amount of financial loss or missing their business opportunities. IDSs can protect network systems. But they often suffer from losing their detection effectiveness and capabilities when processing enormous network traffic. In this article, we proposed an intrusion prevention system, named Cumulative-Sum-based Intrusion Prevention System (CSIPS) which detects malicious behaviors, attacks and distributed attacks launched to local and remote servers/hosts based on intrusion detection techniques and Cumulative Sum (CUSUM) algorithm. Experimental results show that CSIPSs can carry out a higher security level for a united defense environment.
顯示於類別:	[資訊工程學系所] 碩士論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
097THU00394003-001.pdf		624Kb	Adobe PDF	357	檢視/開啟

在THUIR中所有的資料項目都受到原著作權保護.

資料載入中.....