Dissertation > Excellent graduate degree dissertation topics show

Research and Implementation of a Host-Based Intrusion Prevention System

Author: YuanShuai
Tutor: WuKeHe
School: North China Electric Power University
Course: Computer Software and Theory
Keywords: intrusion prevention system system call interception mandatoryhardware confirming control file protection access control
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 2
Quote: 0
Read: Download Dissertation

Abstract


Most of the traditional information protection technologies are based on PDR model. PDR model has constructed the safety inequality:Pt>Dt+Rt and the main technologies are encryption technology, detection technology and emergency response(reinforcement) technology. However, with the emergence of Trojan technology, PDR model is destroyed by such a new method. Under extreme conditions, Pt=0, which means that the security of information is guaranteed only by detection and response mechanisms. Therefore, this thesis analyzes the challenges of safety on hosts, illustrates the design goals and ideas of a host-based intrusion prevention system, studies the key technologies relating to the development of the intrusion prevention system, implements the promotion from protection to defense and reaches the objective of security pre-alarming, the defense in depth and enhancement of the self immunity.Monitoring and capturing the significant system calls is the basic starting point for the host-based intrusion prevention system. It hooks the system service descriptor table and intercepts the system calls from kernel-level. As a result, it provides the real-time and comprehensive monitoring of the operating system and the fine-grained access control of the activities of process and users. The intrusion prevention system realizes the protections of file, registry, process, driver, system hook, network access, system service descriptor table and itself. As for the operations on the sensitive files, the system not only requires the confirmation of access right, but also examines if the local corresponding hardware signals exist, such as the mouse and keyboard, thorough the Mandatory Hardware Confirming Control Technology. It puts an end to any malicious manipulations from the Trojan programs and ensures non-repudiation of operations. This thesis carries out an in-depth research of the host protection with theoretical values and practical values.

Related Dissertations

  1. Study on Channel Allocation of Multi-Channel MAC Protocol in Ad-Hoc Network,TN929.5
  2. Research on MAC Protocol for WIreless Sensor Network,TN915.04
  3. Study on the Access Control of the Court Information System,TP309
  4. Based on WINDOWS platform file security mechanism,TP309
  5. Multi-user Access Control Strategy for Power Distribution Network Based on OFDM,TN919.3
  6. Access Control System Design Based on Palm Vein Technology,TP273.5
  7. University Office System Design and Implementation,TP311.52
  8. Application and Research of Transparent Encryption Technology Based on ERM,TP309.7
  9. Design and Implementation of Control Category Components of Database Access Based on .NET,TP311.52
  10. Design and implementation of civil explosive industry online procurement system,TP311.52
  11. Corps, Department of Education Web information service platform access control system design and implementation,TP393.09
  12. Research of Host-based Intrusion Prevention System Based on Process Behavior,TP393.08
  13. Research on Checking and Digesting Policy Conflicts Under Multi-Policy Environments,TP393.08
  14. Design and Implementation of Web System Security Module Based on Spring Security,TP393.08
  15. Design and Implementation of Identity Based Security Access Storage Software,TP393.08
  16. File-based parsing file infection method,TP391.1
  17. Logically oriented virtual domain multi -level access control system,TP309
  18. Platform for ATM host intrusion defense systems design and implementation,TP393.08
  19. Access control policies based on predicates Analysis System,TP393.08
  20. File Protection System Research Based on Hardware Assisted Virtualization,TP309
  21. Electronic file operations safety monitoring technology research,TP309

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile