Distributed Integrated Defense System Framework And Associated Algorithms

With the wide use of Internet, the network security becomes the focus of research. Fortunately, the author of this dissertation took part in Network Security Integrated Defend System, a project of the MII's EIIF. Though this subject has many sub areas, this dissertation mainly focus on the integrated defend, the veracity of Intrusion Detection and the resisting of the system.This dissertation explores the expansibility deeply by researching Smart Agent, Knowledge Update Center and so on. Each component of different functions is a plug-in, so new component could be added easily. The Smart Agent provides uniform interfaces of management and communications for the plug-ins, and cooperates with Knowledge Update Center to provide the function of auto updating.Now, the Intrusion Detection systems all have the problems about failing to report intrusions and distorting intrusions. It's a big problem to the auto defense of intrusions. This dissertation uses security level and data fusions of several sub Intrusion Detection systems to solve the problems about failing to report intrusions and distorting intrusions. The data fusions of several sub Intrusion Detection systems can easily solve the problems about failing to report intrusions, and cooperates with security level to solve the problems about distorting intrusions. When under attack, if the defense system is disabled, the result is very terrible. To resolve this problem, This dissertation does some research on the resisting of the defense system, and presents the resisting mechanism of Smart Agent, Knowledge Update Center and Auto Response Center to make the function which is disabled enable.Though the test, it's proved that this system achieves the goal of design.