【正文】 ........................................................................................................ 1 國內(nèi)外研究現(xiàn)狀 ............................................................................................................. 2 論文結(jié)構(gòu)安排 ................................................................................................................. 3 2 入侵檢測技術(shù)簡介 ................................................................................................................... 4 研究入侵檢測的必要性 ................................................................................................. 4 入侵檢測的相關(guān)概念 ..................................................................................................... 4 入侵檢測系統(tǒng)的基本原理 ............................................................................................. 4 入侵檢測系統(tǒng)的基本工作模式 ..................................................................................... 5 入侵檢測系統(tǒng)的分類 ..................................................................................................... 6 根據(jù)檢測技術(shù)分類 ................................................................................................ 6 根據(jù)數(shù)據(jù)來源分類 ................................................................................................ 7 入侵檢測目前存在的局限性和不足 ............................................................................. 7 基于神經(jīng)網(wǎng)絡(luò)的入侵檢測技術(shù)的發(fā)展 ......................................................................... 8 3 神經(jīng)網(wǎng)絡(luò)簡介 ........................................................................................................................... 9 神經(jīng)網(wǎng)絡(luò)模型 ................................................................................................................. 9 生物神經(jīng) 元模型 ................................................................................................... 9 人工神經(jīng)元模型 ................................................................................................. 10 神經(jīng)網(wǎng)絡(luò)模型 ..................................................................................................... 12 神經(jīng)網(wǎng)絡(luò)的工作方式 ......................................................................................... 12 神經(jīng)網(wǎng)絡(luò)的基本性質(zhì)及優(yōu)點(diǎn) ............................................................................. 13 神經(jīng)網(wǎng)絡(luò)應(yīng)用于入侵檢測 ........................................................................................... 14 4 基于集成神經(jīng)網(wǎng)絡(luò)的入侵檢測系統(tǒng) ..................................................................................... 15 系統(tǒng)設(shè)計(jì) ....................................................................................................................... 15 系統(tǒng)工作原理 .................................................................................................... 15 特征提取 ............................................................................................................ 15 集成神經(jīng)網(wǎng)絡(luò)算法 ....................................................................................................... 16 遺傳算法 ....................................................................................................................... 17 遺傳算法的定義 ................................................................................................ 17 遺傳算法的基本思想 ........................................................................................ 17 基本遺傳算法 .................................................................................................... 18 基本遺傳算法的運(yùn)行參數(shù) ................................................................................ 20 個(gè)體網(wǎng)絡(luò)的構(gòu)建 ................................................................................................ 20 個(gè)體網(wǎng)絡(luò)的選擇 ................................................................................................ 21 網(wǎng)絡(luò)的集成輸出 ................................................................................................ 22 5 仿真實(shí)驗(yàn)分析 ......................................................................................................................... 23 MATLAB神經(jīng)網(wǎng)絡(luò)工具箱 ............................................................................................. 23 實(shí)驗(yàn)數(shù)據(jù)源 ................................................................................................................... 23 入侵檢測數(shù)據(jù)集預(yù)處理 ............................................................................................... 24 仿真實(shí)驗(yàn) ....................................................................................................................... 24 導(dǎo)入數(shù)據(jù) ............................................................................................................ 24 訓(xùn)練過程 ............................................................................................................ 25 仿真實(shí)驗(yàn)數(shù)據(jù)分析 ....................................................................................................... 27 結(jié)論 ............................................................................................................................................... 28 參考文獻(xiàn) ....................................................................................................................................... 29 致 謝 ............................................................................................................... 錯(cuò)誤 !未定義書簽。 關(guān)鍵詞 ： 網(wǎng)絡(luò)安全 入侵檢測 神經(jīng)網(wǎng)絡(luò) 集成學(xué)習(xí) 遺傳 算法 II Abstract Intrusion detection is a logical addition to firewall, it helps the system to deal with work attacks, expanded the system administrator39。 研究的背景和意義 隨著人類社會(huì)對(duì) Inter需求的日益增長，網(wǎng)絡(luò)安全逐漸成為 Inter及各項(xiàng)網(wǎng)絡(luò)服務(wù)和應(yīng)用進(jìn)一步 發(fā)展所需解決的關(guān)鍵問題，尤其是從 1993年以來，隨著 Inter/Intra技術(shù)日趨成熟，通過 Inter進(jìn)行的各種電子商務(wù)和電子政務(wù)活動(dòng)日益增多，很多組織和企業(yè)都建立了自己的內(nèi)部網(wǎng)絡(luò)并將之與 Inter聯(lián)通。但一般網(wǎng)絡(luò)系統(tǒng)必須對(duì)外開放一些應(yīng)用端口，如 80、 110等 ，這時(shí)防火墻的不足就會(huì)充分體現(xiàn)出來，并且防火墻對(duì)內(nèi)部攻擊無能為力；同時(shí)，防火墻絕對(duì)不是堅(jiān)不可摧的，即使是某些防火墻本身也會(huì)引起一些安全問題。入侵檢測系統(tǒng)（ IDS）由入侵檢測軟件和硬件組合而成，被認(rèn)為是防火墻之后的 第二道安全閘門，在不影響網(wǎng)絡(luò)性能的情況下能對(duì)網(wǎng)絡(luò)進(jìn)行監(jiān)測，