Design And Implementation Of Network Worm Defense System For The Base Level Army

Vigorous computer network technology turn out, life to people have brought about earthshaking change. Give a network safety a problem meanwhile, also, the troops network safety problem concerning national security especially is confronted with more and more austere challenge, the safety how effectively to protect the army net is already becoming new network safety field go into comparing with develop hot spot.The thesis passes the current situation studying, analysing the safety that the army covers as with a net at present at home and abroad, is in flood specifically for the network mounts a virus at present, actual problem that worm virus spreads especially broadly, be tied in wedlock trueness that my military extensive army the present stage grass-roots unit armed force network keeps watch to worm virus is horizontal, the worm having designed the grass-roots unit armed force army net that the extensive grass-roots unit armed force suitable applies keeps watch system. Be system's turn with Snort invade detecting and the Netfilter/Iptables fire prevention wall have been a basis, the high sensibility the virus making use of Snort especially to the worm is invaded checking, has realized gear by being organically combined with the both, has realized the army net thereby resisting the purpose that the worm invades.The thesis applies a technology to key, is in having set forth system first designing process:Snort invade relevance knowledge checking the technology and the Netfilter/Iptables fire prevention wall technology. The worm has kept watch and then, system to army net having carried out population design, has described every system middle module function, and has carried out detailed design and realization on system. Analysis at the same time, having been in progress detailed to entire systematic operation technological process. In the improvement the BM algorithm the thesis is acquiesced in to Snort system has been carried out, and the regulation detecting applying the person to system. By testing BM proving that, improving, the algorithm is able to raise system effectively to the regulation matching speed invading. The thesis at last takes that the Nimda worm virus attacks as example, keeps watch an ability to systematic worm having carried out a testing. By the fact that the testing indicating system, army net worm designed by the main body of a book keeping watch to worm virus invade have fine keep watch effect, be able to realize the purpose helping the grass-roots unit armed force army net to resist worm virus go at.