基于协议分析的入侵检测算法及体系结构研究

传统的基于误用检测的入侵检测系统大多采用简单模式匹配或者是模式匹配的改进方法进行入侵检测。采用模式匹配的入侵检测方法具有匹配的数据量大、误报率和漏报率高的问题。针对这些主要问题,提出了基于协议分析树的通用协议分析入侵检测算法以及基于此算法思想的多Agent并行处理协同工作的入侵检测体系结构,并对其入侵检测性能进行了分析,从理论上证明了其在检测速度上有巨大提高,适合高速网路和下一代网络的需要。     

基于分布式数据安全入侵检测系统中误用检测算法研究

现在面对分布式数据传输的网络环境下,需要分布式数据安全的体系结构入侵检测系统来应对,这样才能一方面检测出分布式网络环境下的入侵行为,同时更容易检测出分布式攻击。由于协议分析技术通过对比网络信息与协议的差异性来检测入侵行为,它有着比模式匹配技术更好的性能。误用检测算法是分布式入侵检测系统中非常重要的检测算法之一。因此本文讨论了基于分布式数据安全误用检测技术入侵检测系模型和协议分析技术,并设计了误用检测算法以及对实行误用检测算法做了形式化语言的描述,用这一技术来确保数据的安全。     

DoS攻击原理与对策的进一步研究

Ｄｏｓ（拒绝服务）攻击是攻击网络系统的一种常用方法,文章对攻击产生的基础,以及 ＳＹＮ Ｆｌｏｏｄｉｎｇ、Ｔｅａｒｄｒｏｐ等典型攻击的原理进行了分析,并提出了改进的对策。还介绍了ＤｏＳ攻击的进一步发展──ＤＤｏＳ（分布式拒绝服务）攻击的原理与防范策略。     

端口扫描技术及攻击和防御分析

文章主要介绍了ＴＣＰ协议的实现和根据ＴＣＰ协议特点可以使用的端口扫描技术及其实现的方法,并且分析了一些由于网络协议和实现的不完善而出现的系统的漏洞情况并给出了一些解决方法。     

基于虚拟多任务机制的OSPF-2的设计与实现

OSPF（Open Shortest Path First Protocol）协议是目前Internet上广泛使用的自治系统内部交换路由信息的动态路由协议。文章介绍了在清华大学研制的国产高性能路由器中分布式路由协议OSPF－2的具体实现。为了实现这一复杂的动态协议,文章提出了基于事件驱动的虚拟多任务机制的设计和实现方法。这种机制能够有效支持复杂系统的分解,在实时性要求不高的前提下提供一种简便有效的并行机制,方便基于状态机的软件实现,提高了软件的可移植性。该方法对于其它的Internet高层协议的设计和实现也有一定的参考价值。     

嵌入式SNMP代理软件的设计与实现

文章分析了嵌入式SNMP代理软件的功能需求,以及软件结构设计,并基于WindNetSNMP软件包,讨论了软件的开发流程。文中讨论的方法对于嵌入式SNMP代理软件的设计实现具有普便的实用意义,并已应用在3G移动数据交换平台网管系统的设计开发过程中。     

基于UDP传输协议的包丢失和失序处理

UDP是互联网上多媒体数据传输采用的主要传输协议。其主要特点是网络开销低但传输不可靠,易产生包丢失或失序。为了对失序数据包进行重排序,应用程序需要预留一个适当的缓冲区以存储期望包到达之前的数据包。该文分析了数据包丢失或失序情况下,缓冲区大小对系统性能的影响,给出了缓冲区大小的一个估计值,并对失序或数据包丢失情况下数据处理的策略进行了讨论。     

交互式视频技术及其应用

本文介绍交互式视频的关键技术,主要是视频传输协议和视频压缩技术,讨论了基于RealSystem的交互式视频系统结构和视频信息传输过程,给出视频服务器的内存、带宽和存储容量的计算方法,最后对三种主要流行技术作了比较。     

NS网络仿真技术及其应用分析

仿真技术在现代通信网络设计中的作用越来越大,本文首先分析了NS网络仿真器的体系结构,对其主要组成部分进行了说明,然后介绍了如何在NS环境下开发用户自己的仿真对象,及在此基础上开发的ATM仿真器的结构。     

An agent architecture for strategy-centric adaptive QoS control in flexible videoconference system

In this paper, we propose an agent architecture to improve flexibility of a videoconference system with strategy-centric adaptive QoS (Quality of Service) control mechanism. The proposed architecture realizes more flexibility by changing their QoS control strategies dynamically. To switch the strategies, system considers the properties of problems occurred on QoS and status of problem solving process. This architecture is introduced as a part of knowledge base of agent that deals with cooperation between software module of videoconference systems. We have implemented the mechanism, and our prototype system shows its capability of flexible problem solving against the QoS degradation, along with other possible problems within the given time limitation. Thus we confirmed that the proposed architecture can improve its flexibility of a videoconference system compared to traditional systems. Takuo Suganuma, Dr.Eng.: He is a research associate of Research Institute of Electrical Communication of Tohoku University. He received a Dr.Eng. degree from Chiba Institute of Technology in 1997. His research interests include agent-based computing and design methodology for distributed systems. He is a member of IPSJ, IEICE and IEEE. SungDoke Lee: He is a Ph.D. Student in the Graduate School of Information Sciences in Tohoku University. He received his MEng degree at Chonbuk National University, Korea in 1991. His research interests include Flexible Network and Knowledge of Agent. Tetsuo Kinoshita, Dr.Eng.: He is an associate professor of Research Institute of Electrical Communication of Tohoku University. He received a Dr.Eng. degree in information engineering from Tohoku University, Japan. His research interests include knowledge engineering, cooperative distributed processing and agent-based computing. He received the the IPSJ Best Paper Award in 1997, etc. He is a member of IPSJ, IEICE, JSAI, AAAI, ACM and IEEE. Norio Shiratori, Dr.Eng.: After receiving his Dr.Eng degree at Tohoku University, he joined the Research Institute of Electrical Communication of Tohoku University in 1977, and is now a professor at the same University. He has been engaged in research on distributed processing system, and flexible intelligent network. He received the 25th Anniversary of IPSJ Memorial Prize-Winning Paper Award in 1985, the 6th Telecommunications Advancement Foundation Incorporation Award in 1991, the Best Paper Award of ICOIN-9 in 1994, the IPSJ Best Paper Award in 1997, etc. He has been named a Fellow of the IEEE for his contributions to the field of computer communication networks.