【正文】 ........................................................................................................ 1 國內(nèi)外研究現(xiàn)狀 ............................................................................................................. 2 論文結(jié)構(gòu)安排 ................................................................................................................. 3 2 入侵檢測技術(shù)簡介 ................................................................................................................... 4 研究入侵檢測的必要性 ................................................................................................. 4 入侵檢測的相關(guān)概念 ..................................................................................................... 4 入侵檢測系統(tǒng)的基本原理 ............................................................................................. 4 入侵檢測系統(tǒng)的基本工作模式 ..................................................................................... 5 入侵檢測系統(tǒng)的分類 ..................................................................................................... 6 根據(jù)檢測技術(shù)分類 ................................................................................................ 6 根據(jù)數(shù)據(jù)來源分類 ................................................................................................ 7 入侵檢測目前存在的局限性和不足 ............................................................................. 7 基于神經(jīng)網(wǎng)絡(luò)的入侵檢測技術(shù)的發(fā)展 ......................................................................... 8 3 神經(jīng)網(wǎng)絡(luò)簡介 ........................................................................................................................... 9 神經(jīng)網(wǎng)絡(luò)模型 ................................................................................................................. 9 生物神經(jīng) 元模型 ................................................................................................... 9 人工神經(jīng)元模型 ................................................................................................. 10 神經(jīng)網(wǎng)絡(luò)模型 ..................................................................................................... 12 神經(jīng)網(wǎng)絡(luò)的工作方式 ......................................................................................... 12 神經(jīng)網(wǎng)絡(luò)的基本性質(zhì)及優(yōu)點 ............................................................................. 13 神經(jīng)網(wǎng)絡(luò)應(yīng)用于入侵檢測 ........................................................................................... 14 4 基于集成神經(jīng)網(wǎng)絡(luò)的入侵檢測系統(tǒng) ..................................................................................... 15 系統(tǒng)設(shè)計 ....................................................................................................................... 15 系統(tǒng)工作原理 .................................................................................................... 15 特征提取 ............................................................................................................ 15 集成神經(jīng)網(wǎng)絡(luò)算法 ....................................................................................................... 16 遺傳算法 ....................................................................................................................... 17 遺傳算法的定義 ................................................................................................ 17 遺傳算法的基本思想 ........................................................................................ 17 基本遺傳算法 .................................................................................................... 18 基本遺傳算法的運行參數(shù) ................................................................................ 20 個體網(wǎng)絡(luò)的構(gòu)建 ................................................................................................ 20 個體網(wǎng)絡(luò)的選擇 ................................................................................................ 21 網(wǎng)絡(luò)的集成輸出 ................................................................................................ 22 5 仿真實驗分析 ......................................................................................................................... 23 MATLAB神經(jīng)網(wǎng)絡(luò)工具箱 ............................................................................................. 23 實驗數(shù)據(jù)源 ................................................................................................................... 23 入侵檢測數(shù)據(jù)集預(yù)處理 ............................................................................................... 24 仿真實驗 ....................................................................................................................... 24 導(dǎo)入數(shù)據(jù) ............................................................................................................ 24 訓(xùn)練過程 ............................................................................................................ 25 仿真實驗數(shù)據(jù)分析 ....................................................................................................... 27 結(jié)論 ............................................................................................................................................... 28 參考文獻 ....................................................................................................................................... 29 致 謝 ............................................................................................................... 錯誤 !未定義書簽。 關(guān)鍵詞 ： 網(wǎng)絡(luò)安全 入侵檢測 神經(jīng)網(wǎng)絡(luò) 集成學(xué)習(xí) 遺傳 算法 II Abstract Intrusion detection is a logical addition to firewall, it helps the system to deal with work attacks, expanded the system administrator39。 研究的背景和意義 隨著人類社會對 Inter需求的日益增長，網(wǎng)絡(luò)安全逐漸成為 Inter及各項網(wǎng)絡(luò)服務(wù)和應(yīng)用進一步 發(fā)展所需解決的關(guān)鍵問題，尤其是從 1993年以來，隨著 Inter/Intra技術(shù)日趨成熟，通過 Inter進行的各種電子商務(wù)和電子政務(wù)活動日益增多，很多組織和企業(yè)都建立了自己的內(nèi)部網(wǎng)絡(luò)并將之與 Inter聯(lián)通。但一般網(wǎng)絡(luò)系統(tǒng)必須對外開放一些應(yīng)用端口，如 80、 110等 ，這時防火墻的不足就會充分體現(xiàn)出來，并且防火墻對內(nèi)部攻擊無能為力；同時，防火墻絕對不是堅不可摧的，即使是某些防火墻本身也會引起一些安全問題。入侵檢測系統(tǒng)（ IDS）由入侵檢測軟件和硬件組合而成，被認(rèn)為是防火墻之后的 第二道安全閘門，在不影響網(wǎng)絡(luò)性能的情況下能對網(wǎng)絡(luò)進行監(jiān)測，