Dissertation > Excellent graduate degree dissertation topics show

Research on Intrusion Detection and Alarm Correlation

Author: ZhangZhenXing
Tutor: LiKunLun
School: Hebei University
Course: Communication and Information System
Keywords: Intrusion Detection Alarm polymerization Semi-supervised learning Attribute similarity Maximum density
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 14
Quote: 0
Read: Download Dissertation

Abstract


Intrusion detection has become an important part of the field of network and information security , and alarm information aggregation technology has become an essential part of the intrusion detection system . With the increasing network size and transmission speed , the flood of network traffic , intrusion detection systems , and real-time alarm information processing and data processing capability challenges . Often , massive data to be processed , abnormal data rarely , this small portion of abnormal data will be a large number of normal data flooded , affecting the detection performance of intrusion detection systems . System resources will be a large number of normal data occupies , but also caused a large increase in the number of repetitive or imperfect alarm . A large number of false and redundant alarms not only does not reflect the actual situation of the system and network , beyond the administrator 's processing power , and may eventually lead to paralysis of the system or network . In this paper, the data of the mass to be detected abnormal data is usually overwhelmed by the large number of normal data , and how to reduce the problem of a large number of false and redundant alarms , two workarounds . Dominant in vast amounts of data to be processed in the normal data , taking up most of the resources of the system affect the detection performance , a data filtering method based on semi-supervised learning strategy , removing part of the normal data set data (ie redundant data) . Normal data and abnormal data is relatively balanced , to improve the real-time detection system and reduce the effect of the false alarm . How to reduce the problem of false and redundant alarms , a method based on the maximum density of the alarm attribute similarity . Abatement of false and redundant alarm information of massive alarm information to reduce the workload of the system administrator , and enhancing the system's real-time availability .

Related Dissertations

  1. Intrusion detection based on the ultrasonic echo envelope in the military security patrols,E919
  2. Research on Intrusion Detection Technology of Wireless Sensor Networks Based on Behavior Trust,TP212.9
  3. Association rule mining based Intrusion Detection System Research and Implementation,TP393.08
  4. The Research on Intrusion Detection System Based on Machine Learning,TP393.08
  5. Intrusion Detection in Mobile Ad Hoc Networks: A Timed Finite State Machines Approach,TN929.5
  6. An Intrusion Detection System for High-Speed Networks,TP393.08
  7. Research on the Security in Wireless Sensor Network,TN915.08
  8. Semi-supervised Learning and Active Learning of Sentiment Classification Coupled with Domain Knowledge,TP181
  9. Sensitivity Analysis and Application of Orthogonal Weight Function Neural Network,TP183
  10. The Study of Intelligent Intrusion Detection System Based on Neural Network in Linux,TP393.08
  11. Petri net -based network intrusion detection system Research and Implementation,TP393.08
  12. FSVM -based data mining method and its application to intrusion detection research,TP393.08
  13. Web-based intrusion detection system logs Design and Implementation,TP393.08
  14. IPv4-IPv6 transition technologies CIDF Based Intrusion Detection System,TP393.08
  15. Intrusion detection based on data mining technology research,TP393.08
  16. Research of Intruding Detection Based on DCA and NSA Algorithm,TP393.08
  17. Research on Intrusion Detection Based on Protocol Analysis and Immune Principle,TP393.08
  18. Design and implementation of intrusion detection system based on association rules,TP393.08
  19. Web optimization methods for monitoring of sensitive information,TP393.08
  20. Study on intrusion detection method of ultrasonic echo envelope characteristics,TP274.53
  21. Ensemble Learning Study and Its Application,TP181

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile