Dissertation > Excellent graduate degree dissertation topics show

Research and Design of Adaptive Intrusion Prevention System

Author: YuanQi
Tutor: XuWenBo
School: Jiangnan University
Course: Applied Computer Technology
Keywords: Adaptive System Hetero-Instruction Set Fault Tolerance Self-Healing Markov Chain Model Code Morphing Dynamical Translating Parallel Processing
CLC: TP393.08
Type: Master's thesis
Year: 2007
Downloads: 74
Quote: 0
Read: Download Dissertation

Abstract


The appearance of the intrusion detection systems shows more advantages on the conventional firewall. But intrusion detection systems are fundamentally passive and fail-open. Because their primary task is classification, they do nothing to prevent an attack from succeeding. An intrusion prevention system (IPS) adds protection mechanisms that provide fail-safe, automatic response and enhanced adaptive capabilities.An Adaptive IPS (Adaptive Intrusion Prevention System), a hybrid active approach to server or host security that prevents binary code injection attacks was designs in this paper. Two major components are incorporated in it: a proxy that integrates an anomaly-based detector and a signature-based filtering scheme, and a supervision framework that employs Hetero-Instruction Set (HIS). Since a proxy fundamentally includes signature-matching function, a Markov Chain-based anomaly-detector is added into it to implement the proxy.We implement the supervision framework by employing parallel Master-Slave application server to process requests and rewriting the source code of DAISY to emulate the Code Morphing Software of Crusoe to uphold HIS. Since HIS prevents code injection attacks and can also precisely identify the injected code, the system can tune the classifier and the filter via a learning mechanism based on this feedback. Capturing the injected code allows Adaptive IPS to construct attacking signatures for zero-day exploits. The filter and classifier can match known malicious input or release anomalous input that is not malicious, effectively protecting the application from additional instances of an attack - even zero-day attacks or attacks that are completely metamorphic in nature without lots of false positives.The fact is approved from the results of experiment that the anomaly-detector of system can classify anomaly stream efficiently, and the Master-Slave application server can not only be adapted zero-day attacks, but also new normal network stream. If appropriate functions are selected to parallel processing, the Slave Server affects the performance of system faintly, even can enhance the efficiency of application. Adaptive IPS can be deployed transparently to clients or servers with minimal impact on their performance. The paper describes a prototype that protects HTTP servers, but Adaptive IPS can be applied to a variety of server and client applications.

Related Dissertations

  1. Polarized-Light/Geomagnetism/GPS/SINS Integrated Navigation Algorithm,V249.328
  2. The Research of Fault-Tolerant Techniques for Parallel/Distributed Network Simulator PDNS,TP302.8
  3. Research on Checkpointing in Mobile Computing Environment and Modeling with Petri Nets,TP301.1
  4. Design and Implementation of a Fault-Tolerant Topology Control Algorithm for the Space Information Network,TN915.02
  5. Group Key Management in Wireless Sensor Networks,TN918.82
  6. Interface Driver Design and Realization of Mutiple-dsp Parallel Processing for Route Planning System,TP368.12
  7. ARM Embedded System for H.264 decoding research,TP368.1
  8. E-commerce based on Mobile Agent Communication Research mailbox,TP393.09
  9. High-performance storage system is a key technology research,TP333
  10. Fault-tolerant real-time systems based on energy-efficient scheduling algorithm,TP316.2
  11. Real-time marine plankton target identification system design,TP391.41
  12. Local tolerance studies twisted cube LTQ_n,O157.5
  13. Power system capacitor explosion causes of and countermeasures,TM533
  14. Fault-tolerant software fault-tolerant computer systems design and implementation,TP302.8
  15. Automated production plant simulation and optimization of resource allocation,O226
  16. Study on Influencing Factors of Knowledge Sharing in Supply Chain under CAS Theory,F224
  17. Hyperspectral Unmixing Based on Nonnegative Matrix Factorization,TP751.1
  18. DTMB in 3780 point FFT in the implementation of multi-core DSP platform,TP368.1
  19. Research on the Impact of Supply Chain Information Sharing on Environment Performance,F274
  20. A Research on Pyramid Model Construction and Data Processing Technology of Terrain Data in Virtual Terrain Environment,P209
  21. Edge Fault Tolerance of Super Edge Connectivity for Several Families of Interconnection Networks,O157.5

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile