Dissertation > Excellent graduate degree dissertation topics show

A Study on Firewall and IDS Linkage Algorithm

Author: FangHaiPing
Tutor: ZhaoJingSheng
School: Qingdao Technological University
Course: Communication and Information System
Keywords: firewall IDS linkage technology invasion similarity algorithm rules update algorithm
CLC: TP393.08
Type: Master's thesis
Year: 2010
Downloads: 49
Quote: 0
Read: Download Dissertation

Abstract


As the common security technology, firewall and IDS has been widely used in the network. Facing to the ever-changing network environment, security products working alone can not meet the demand. According to the research of linkage technology and linkage system, we study the firewall and IDS working process. Under the existing deficiencies of linkage system technology and algorithm, we propose a new algorithm, as well as to improve the original algorithm.Main work of this paper:(1)Analysis of the respective capabilities principle of firewall and IDS, and commonly used method, analyze the respective advantages and shortcomings, made the need for linkage.(2)Proposing linkage model of firewall and IDS, describing the role of each module, implementing socket-based communication .Analyzing the structure and work process of Snort-based IDS and based on Netfilter /Iptables firewall. Achieving data packet capture modules based on Libpcap and packet filtering firewall rules setting.(3) Analyzing the performance parameters of IDS, calculating the linkage loss of linkage system ,as the basis for select a appropriate response strategies Analyzing the workflow of linkage system, designing pre-analysis components, analysis components, strategy selection module and so on. Defining system communication format , focusing on analysis of strategy process.(4)According to the performance and alarm accuracy of IDS ,we analyze the linkage loss because of the deficiencies of IDS ,then improve IDS alarming similarity algorithm .The algorithm is based on source destination address, port and time of attack, Calculate the similarity of alarm information.(5) According to the managing principles of dynamic firewall rules, we put forward maintaining and updating algorithm of dynamic rules .The algorithm considers the various factors that affecting the actual attack fully .According to harmful levels of specific attacks and system restore degree, calculated according to the specific data and obtained the degree of importance of the dynamic rules. According to that, the system updates the dynamic rules automatically.

Related Dissertations

  1. Design and Implementation of Assistant Management System Server Based on Hardware Firewall,TP393.08
  2. Firewall and three switch - based campus network security policy research,TP393.08
  3. Gansu Fuyuan Chemical analysis and design of integrated office platform,TP311.52
  4. The Design and Implementation of A Military University Network in Security and Reliability,TP393.18
  5. Fast protocol identification based firewall system design and implementation,TP393.08
  6. Firewall policy conflict detection and visualization,TP393.08
  7. Research on Trojan Horse Transmis Sion Technology Based on HTTPS and WEB SERVICE Shanghai Jiao Tong University,TP393.08
  8. Research and Implementation of High Performance Rule Matching Key Technology for IPv6 Firewall,TP393.08
  9. Research of Key Technology of Firewall Security Policy Configuration,TP393.08
  10. Uncertain reasoning algorithm of fuzzy rule - based matrix transform,TP18
  11. Design and implementation of network security technology application and reporting system in the e-government system,TP393.08
  12. Design and Implementation of Soft-Switch Based SIP Gateway,TN915.05
  13. Legal Research on the Financial Firewall Regulations,D922.28
  14. Research and Implementation of Computer Remote Control Based on Trojan Horse Technology,TP273
  15. Research and Design of Intelligent Generation of Filtered Rules,TP393.08
  16. Network worm defense research,TP393.08
  17. Comprehensive host -based firewalls and intrusion detection security system,TP393.08
  18. Research and Implementation of the Packet Filtering Technology in Integrated Security Gateway Firewalls,TP393.08
  19. Network Intrusion Detection System Research Based on Intelligence Algorithm,TP393.08
  20. Research of Hierarchical Distributed Intrusion Detection System,TP393.08
  21. SIP-based VoIP technology implementation on the campus network,TN916.2

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile