基于改進(jìn)的BM算法在IDS中的實(shí)現(xiàn)

論文字?jǐn)?shù):12861,頁數(shù):25

摘  要
入侵檢測技術(shù)是一種主動(dòng)保護(hù)自己免受攻擊的網(wǎng)絡(luò)安全技術(shù)，是繼防火墻、數(shù)據(jù)加密等傳統(tǒng)安全保護(hù)措施后新一代的安全保障技術(shù)，作為防火墻的合理補(bǔ)充，入侵檢測技術(shù)能夠幫助系統(tǒng)對付網(wǎng)絡(luò)攻擊，擴(kuò)展系統(tǒng)管理員的安全管理能力，提高信息安全基礎(chǔ)結(jié)構(gòu)的完整性。
本文首先對入侵檢測現(xiàn)狀、入侵檢測系統(tǒng)組成進(jìn)行了分析和總結(jié)，重點(diǎn)研究了網(wǎng)絡(luò)入侵檢測的核心技術(shù)——入侵檢測算法。模式匹配算法是基于特征匹配的入侵檢測系統(tǒng)中的核心算法，是當(dāng)前入侵檢測設(shè)備中普遍應(yīng)用的算法。模式匹配的效率決定了入侵檢測系統(tǒng)的性能。通過對開放源代碼的snort中模式匹配技術(shù)的改進(jìn)，提出了一種更快的模式匹配算法，該算法可以加快入侵檢測系統(tǒng)的檢測速度，提高現(xiàn)有入侵檢測系統(tǒng)的檢測能力。

關(guān)鍵詞：BM算法；入侵檢測系統(tǒng)；模式匹配；單模式匹配算法

Implementation of Improved BM Algorithm in IDS
Abstract
Intrusion Detection Technology is such a kind of safe technologies that can make one avoid being attacked by network practices voluntarily, a new generation of security technology after the traditional security protective measure, such as fire wall, data encrypted etc. As a rational supplement of fire wall, Intrusion Detection Technique can help the system to deal with attacks from network and expand security managerial ability of system manager, and raise the integrality of the security infrastructure of the information.
First, this dissertation analyses and summarizes the current status of intrusion research, focuses on research and practice on intrusion detection system (IDS) algorithm which is technique difficulties in network intrusion detection. Pattern Matching Algorithm is central algorithm in signature based on IDS. The effect of these IDS is dominated by pattern matching algorithm used. By means of improving the pattern matching technique in open source code-snort, an even faster algorithm of pattern matching is presented so that the detection speed of IDS can be increased and the detective ability of available IDS is proved.

Key words: BM Algorithm; IDS; Pattern-matching; Single Pattern-matching Algorithm
目  錄

1  引言 1
1.1 課題背景 1
1.2 本課題研究的意義 2
2  入侵檢測系統(tǒng)概述 2
2.1 入侵檢測的概念 2
2.2 入侵檢測系統(tǒng)的組成及部署 2
2.2.1 入侵檢測系統(tǒng)的組成 2
2.2.2 入侵檢測系統(tǒng)的部署 3
2.3 網(wǎng)絡(luò)入侵檢測系統(tǒng)Snort 3
2.3.1 Snort系統(tǒng)概述 3
2.3.2 Snort系統(tǒng)簡要分析 4
2.3.3 Snort系統(tǒng)部分源碼簡介 6
3  BM算法 6
3.1 BM算法 6
3.1.1 BM算法具體介紹 6
3.1.2 BM算法預(yù)處理 8
3.1.3 BM算法查找 9
3.2 BM算法字符匹配實(shí)例 9
4  BM算法的改進(jìn)和實(shí)現(xiàn) 12
4.1 BM算法的改進(jìn)思想 12
4.2 改進(jìn)的BM算法 14
4.3 改進(jìn)的BM算法與BM算法的性能比較 16
4.3.1 性能實(shí)例比較 16
4.3.2 性能測試比較 17
4.4改進(jìn)的BM算法在Snort系統(tǒng)中的實(shí)現(xiàn) 18
結(jié)    論 19
參考文獻(xiàn) 19
致    謝 20
聲    明 21