The Research And Implementation Of Network Intrusion Detection System Based On Petri Net

In recent years, network has penetrated into every aspect of our life with its rapidgrowth and popularization. More and more serious network security problems have occurredtogether with this process, especially network intrusion problem. It has seriously affected thenormal use of network, so research of network intrusion detection has become one of thehottest research areas. This thesis proposed a network intrusion detection system based onPetri net to solve the network intrusion problems. It can filter the intrusion behavior by usingparticle filter technique into network intrusion detection. This thesis also models andsimulates against two specific intrusion behaviors (intrusion and Trojan). The tool used formodeling is colored Petri net which is built up on basic Petri net. Colored Petri net can modelcomplex object by adding specific meaning of tokens as well as structured modeling.This thesis emphasized on the process of modeling with colored Petri net. It designsnetwork intrusion detection system against intrusion and Trojan behaviors and models withcolored Petri net. Both of the two models for network intrusion detection system are dividedinto three modules. The models,functions and connecting methods of these modules arepresented in the thesis. The meaning of the places and color sets of tokens in the model arepresented in detail. The meanings of the transitions and requirements for them to fire are alsointroduced. At last, this thesis programs with GPenSIM (General Purpose Petri Net Simulator)toolbox which is a simulation tool and introduces the process of solving some problems. Theresult of the simulation is also presented and analyzed.