Research On Early-Warning Systems Of Based On Net Environmental Monitoring

With the rapid development of the application of the networks, the intrusion of hacker becomes increasingly rampant. It is far from being enough to depend on the black-box safety system made up of some defensive software. We must adopt a new perspective to monitor the internal and external environment and provide more information of the net connections to prevent the unknown intrusion.The common combination of intrusion detection and fire-wall is widely used to guarantee the safety of networks. The system also possesses the basic nature of intrusion detection and fire-wall, it weakens the function of automatic risk handling, and strengthens the function of environmental monitoring and information reporting. This working pattern is of great significance to the higher users.This thesis gives a detailed account of the safety of networks from a new angle. It focuses on the true feedback to the users about the real environment of the computers, doing some research on three aspects of environmental monitoring of the inner environment, WAN and LAN to help the users to make decisions instead of making decisions for the users. This system is mainly for the superior users, it's a supplement to the available safety software.The principle of distributing system resources according to need is established. A danger level evaluation model based on biological stress response for net connection is proposed, based on the danger level of net connections, the model can control the decode depth and capture strategy of protocol analyzer, which can not only release benignant packages, but also prevent doubtful packages. Thus the problem of how to trade-off between efficiency and accuracy is solved properly to certain extents. The proposed model wins other models by distinguishing different types of packages, thus the problem of what to capture is solved properly.A multi-criterion pruning algorithm for decision tree is proposed, which can enrich the pruning methods and improve the flexibility of decision tree. By selecting different criterion and adjusting different parameters, the built decision tree can be fit for various data objects and performance requirements. So the problem of classification during preprocessing period is solved.The paper makes a study on the net environment from three perspectives of inner environment, WAN, and LAN,puts forward the solution of integrated analysis , hierarchy control and the humanization LAN safety early warning strategy。The systems have more disadvantages. The establed model of net-connection is also younger. We consider that the evaluation characters of RVC can not overwrite all things. And parameters will try other combinationing pattern. The work in this thesis will be do more things in order to be best.