信息安全与技术
信息安全與技術
신식안전여기술
INFORMATION SECURITY AND TECHNOLOGY
2014年
8期
28-32
,共5页
移动互联网%入侵检测系统%移动代理%遗传算法
移動互聯網%入侵檢測繫統%移動代理%遺傳算法
이동호련망%입침검측계통%이동대리%유전산법
mobile internet network%intrusion detection system%mobile agent%genetic algorithm
无线通信在无线空间传播信道特殊的辐射、开放性会导致网络运营和通信的安全性受到极大的威胁。近年来,将遗传算法和移动代理应用于IDS中的研究越来越多。传统的基于知识的IDS由于需要领域专家人工进行规则和模式的建立,并随着时间和空间的变化会导致专家规则库局限性突显,检测的有效性和正确性不高,因而需要对IDS的性能进行优化。文中首先介绍了移动互联网网络结构和安全问题,然后提出通用的IDS模型结构及分类,设计出一种基于移动Agent和遗传算法的入侵检测系统。该系统具有灵活性强、可扩展性好及适应性强和误检率低等特点,满足移动IPv6环境的使用。实验结果表明提出的设计模型在算法性能和检测效率上具有优势,适合于移动互联网。
無線通信在無線空間傳播信道特殊的輻射、開放性會導緻網絡運營和通信的安全性受到極大的威脅。近年來,將遺傳算法和移動代理應用于IDS中的研究越來越多。傳統的基于知識的IDS由于需要領域專傢人工進行規則和模式的建立,併隨著時間和空間的變化會導緻專傢規則庫跼限性突顯,檢測的有效性和正確性不高,因而需要對IDS的性能進行優化。文中首先介紹瞭移動互聯網網絡結構和安全問題,然後提齣通用的IDS模型結構及分類,設計齣一種基于移動Agent和遺傳算法的入侵檢測繫統。該繫統具有靈活性彊、可擴展性好及適應性彊和誤檢率低等特點,滿足移動IPv6環境的使用。實驗結果錶明提齣的設計模型在算法性能和檢測效率上具有優勢,適閤于移動互聯網。
무선통신재무선공간전파신도특수적복사、개방성회도치망락운영화통신적안전성수도겁대적위협。근년래,장유전산법화이동대리응용우IDS중적연구월래월다。전통적기우지식적IDS유우수요영역전가인공진행규칙화모식적건립,병수착시간화공간적변화회도치전가규칙고국한성돌현,검측적유효성화정학성불고,인이수요대IDS적성능진행우화。문중수선개소료이동호련망망락결구화안전문제,연후제출통용적IDS모형결구급분류,설계출일충기우이동Agent화유전산법적입침검측계통。해계통구유령활성강、가확전성호급괄응성강화오검솔저등특점,만족이동IPv6배경적사용。실험결과표명제출적설계모형재산법성능화검측효솔상구유우세,괄합우이동호련망。
Wireless communication in the wireless space radiation, propagation channel special open wil lead to security of network management and communication is under the great threat. In recent years, the application of genetic algorithm and the mobile agent in IDS more and more research. Based on the traditional knowledge of IDS due to the need to experts in the field of artificial rules and pat erns, and with the change of time and space wil lead to the expert rules limitations highlight, correctness and ef ectiveness of the detection is not high, so the need to optimize the performance of IDS. Firstly introduce the mobile Internet network architecture and security problems, and then put forward a general IDS model and classification, a design based on mobile Agent and genetic algorithm in intrusion detection system, the system has flexibility, scalability and strong adaptability and low error rate, meet the needs of mobile IPv6 environment to use. Experimental results show that the proposed design model in the performance of the algorithm and the detection ef iciency advantages, suitable for mobile network.