Implementation And Testing System Of Campus Network Intrusion

With the extensive development of computer network technology and Internet application, especially the presentation and application of many new concepts and new frontier in e-government, e-commerce, home information and military information warfare and the new field, security issues have become increasingly urgent。Right now,more and more computer systems are huge.Application softwares are becoming more and more complex, which lead security holes in system are inevitable. In the meantime, the speed of research in computer security, especially the network security, lags the development of technology and application in computer system, which causes various attacks to be guarded against. Therefore, only using the general intrusion prevention technology to ensure the security of computer systems has been far from enough, it also needs a technology which can discover and report the unauthorized acts or anomalies in time——the intrusion detection technology.This is analysis the current network structure in our school.on the basis of existing IDS, I designs a IDS which is based on the campus network under the LINUX system. These is doing reachers on following subjects:(1)Do researches on detection principle of IDS; Design an Intrusion detection system bases on campus network; then analyses the specific feature of the main composition module in system;(2) do deeper researchers in data packet Capture Module, find out that the major bottleneck to affect the whole performance is data packet Capture Module. Then put forward a skill which is using NAPI and memory mapping technology to improve the efficiency of data capture. After all of this study, the capture performance of the module has greatly improved.(3) In the design of intrusion detection module, protocol analysis and pattern matching technology and the system performance is better than the traditional intrusion detection system. In string matching algorithm of the BM algorithm is improved, significantly improve the detection efficiency of intrusion detection system.Through the experimental system performance test and in the practical teaching in the network operation, intrusion detection system function test,and the testing results are analyzed, the system is designed in this paper can provide a more powerful safeguard for the campus network security.