Research On IP Network Security Analysis Based On Network Measurement

In recent years, more and more attention is paid to the network security. Network intrusion detection and network vulnerability analysis are active solution for network security problems, and they are too much important. This dissertation deals mainly with the IP network security analysis based on network measurement. Network intrusion detection system and network vulnerability analysis system are also discussed in detail. The Following are the main achievements: Distributed Network Measurement and Analysis Infrastructure (DNMAI), the cooperant result of all the researchers of our workgroup, is discussed in detail, and also the important status of the network intrusion detection and network vulnerability analysis in DNMAI. The base principles of the network intrusion detection system and some kinds of typical intrusion detection system are briefly described. Then, a new network intrusion detection system based on data mining is given. Two kinds of network vulnerability analysis model are given aiming at the limitation of the current network vulnerability analysis technique, and both the two models given by this dissertation separately have improvements and enhancements comparing with the current analysis technique.