Analysis And Design Of The Automated Intrusion Response System Based On Game Tree

With the rapid development of computer and network, all Internet services have come into every field of people's life. On one hand it gives huge convenience to human activities. On the other hand it also takes unprecedented threats to us. The networking security problem becomes more serious, various kinds of malignant attack and the security incidents emerge in an endless stream. Intrusion detection as an important means of safe protection offers the ability to detect intrusion attempting and behavior for us. Intrusion response can limit, block and eradicate the damages from intrusion according to the result detected. It is already quite ripe to intrusion detection system at present and a lot of outstanding products have appeared. But the research in intrusion response is still relatively limited. This paper consulted a large number of documents and studied on the foundation of others'outstanding achievements to compose this model which tells something about research on game tree decision making and automated system based on intrusion response.Game tree policy is a predictable, global, deeply analyzed policy method. The thesis proposes an automated intrusion response system based on game tree decision making, for short GTDM. The response decision-making system is whole controlled by computer.The paper mainly makes research on the following aspects:First, study the relative theory and technology about intrusion detection and intrusion response decision-making, in terms of the game tree theory and algorithm, including the creation procedure of game tree, search algorithm, and game evaluation function and so on.Second, study the design of the automated intrusion system based on game tree decision-making on the basis of summing up intrusion response work. Include the whole design of system model, architecture of game tree decision making and automatic intrusion system.Third, this paper discuss problems to improve in the system.This thesis is based on the theory of game tree theory, the information security technology in the network, and the existing knowledge of the computer hardware and software. The author's creative work is contained by the follow contents:First, apply game tree theory to security intrusion response decision-making system.Second, the author proposes an automated intrusion response model based on game tree.Third, design the game rules in the game tree decision making.Fourth, the paper gives a method of designing game tree evaluation function.Fifth, use software self-repairing concept in system planning.In the author's opinion, applying game tree policy to automated intrusion system, gives us one feasible way of improving the responsiveness, efficiency of intrusion response. It makes important sense to protect our system security.