IPv6下基于移动代理的入侵检测系研究-计算机应用技术专业毕业论文.docx

Subject Subject ：Research on IPv6 Intrusion Detection System Based on Mobile Agent Specialty：Applied Technology of Computer Name ：Wen Yh (Signatu re) 讹rL h Instructor：Gong Shangfu (Signature) ABSTRACT With the rapid development of the computer network technology，the network security has been more and more attached importance to by people．As a kind of active secure protection technology，intrusion detection Can detects sorts of malicious attacks in time and responds，resealch of IDS has been a hot issue．The next generation protocal IPv6 brings a new challenge to the network security．Therefore，it is important to study intrusion detection system of IPv6． In this paper，existing traditional IDS and mobile agent based intrusion detection systems ale analyzed in detail，and the advantages of mobile agent’S application in intrusion detection technologies ale introduced．According to all discussed above，the author adopts typical mobile agent system IBM Aglets to design a framework of IPv6 IDS based on mobile agent and various functional mobile agents．Comparing with the traditional Centralized Intrusion Detection System，the new one iS regarded as a great progress in applying distributed components to collect and analyze the intrusion data． As an autonomous unit，the mobile agents are able to migrate to the monitored hosts，analyze the data and find intrusion behaviors．This model Can be used to prevent the distributed attacks．In a word，the model is an effective security-defensive mechanism． The four key parts：data collection agent，data analysis agent，rules basement，synthesis analysis agent and communication mechanism of agents in system ale designed and validated 、撕tll IBM Aglets，a Java-based mobile agent platform．The technology ofcapturing the data packets and the protocal analysis ale analysed．Rule sentences ale defined．Pattern match and protocal analysis technology ale discussed and four kind of pattern match arithmatics are analysed