計算機(jī)免疫系統(tǒng)中異常識別的設(shè)計與實(shí)現(xiàn).pdf

1、臻計SITY碩士學(xué)位論文MADlSSERTATl0N計算機(jī)免疫系統(tǒng)中異常識別的設(shè)計與實(shí)現(xiàn)學(xué)位審請人：指導(dǎo)教師：攀譴類霧l：學(xué)科專業(yè)：授予蕈位：答辯日期：強(qiáng)巖王鳳先教授羔學(xué)碩士計算機(jī)艘用技術(shù)澎建大學(xué)墨Oo擻年六月657譽(yù)盯盟秘∽投號碼號℃糞酣鐓分學(xué)學(xué)AbstractAbstractComputersecurityisapopulartopicinthefieldofcomputerManynewtechniquesandproductso

2、fcomputersecurityhavebeenpresented，butmostofthemarefarfrombeingquiteffectiveHowevertheproblemscausedbycomputersecurityaremoreand￡娃ofecomplexResentyears曩newtechnologybyimitatingnaturalimmunesystemtoprotectthecomputerhasbe

3、enputforward，thatiscomputerinamunesystem，whichprovidesanewapproachtosolvetheproblemofcomputersecurityByimitatingnaturalhnnaunesystemwehavedesignedageneralcomputerimmunesystemmodel(GECISM)whichconsistsofsomeagents，andever

4、yagentimitatesthefunctionandmechanismofdifferentimmunecellsTheagentsasawholeCallprotectthehostbycooperationThepapermainlyexpatiatesthestudyonthestructureofMCAgenLandallresearchesareundertheLinuxoperatingsystemMCAgentisth

5、einterfacebetweenGECISMandtheoutsideenvimranentIt’Smainroleistodetectunusualprogrambehaviorandthedetectionsarebased013thesystemcallsequencesproducedbytheprocessesSystemcallcollectorrulebaseanddetectoraremaincomponentsofM

6、CAgentSystemcallcollectorisrealizedbyputtingapatchintothekernelofLinuxoperatingsystem。ThepaperdescribesindetailhowdoesMCAgentcollectsystemcallsandpartitionthesystemcallsequencesintoshortsystemcallsequences，andtheanalyzin

7、gofsystemcallsequenceispresentedThemethodispresentedinthepaperabouthowtoapplyingDataMiningapproachesintocoHecfionsofshortsystemcalisequencestogenerateintrusiondetectionrules，andtheconrseandresultsoftheexperimentsbasedonC

8、45algorithmandCARTalgorithmareshow蕾蛩撼rulesintherulebaseofMCAgentareagroupofiSthensentences，byusingthemwhetherashortsystemcallsequenceisnormalorabnormalCanbejudgedAtlast，thepaperillumin。ateshowdoesthedetectorofMCAgentdete