电信科学 ›› 2010, Vol. 26 ›› Issue (10): 80-86.doi: 10.3969/j.issn.1000-0801.2010.10.020

• 研究与开发 • 上一篇    下一篇

分布式无线入侵防御系统预先决策引擎研究

陈观林1,2,冯雁2,王泽兵1   

  1. 1 浙江大学城市学院计算机与计算科学学院 杭州310015
    2 浙江大学计算机学院 杭州310027
  • 出版日期:2010-10-15 发布日期:2010-10-15
  • 基金资助:
    浙江省自然科学基金资助项目

Research of Distributed Pre-Decision Engine in Wireless Intrusion Prevention Systems

Guanlin Chen1,2,Yan Feng2,Zebing Wang1   

  1. 1 School of Computer and Computing Science，Zhejiang University City College，Hangzhou 310015，China
    2 College of Computer Science，Zhejiang University，Hangzhou 310027，China
  • Online:2010-10-15 Published:2010-10-15

在线阅读

16

PDF下载

693

被引次数

11

摘要：

随着无线局域网的飞速发展，无线入侵防御系统正成为网络安全领域的研究热点。本文在分析无线局域网常见攻击方法的基础上，设计了一个分布式无线入侵防御系统预先决策引擎（distributed pre-decision engine，DPDE），能够有效地预测攻击者的入侵意图并提供主动的入侵防御。DPDE引擎采集无线设备信息，在规划识别中引入规划支持程度，扩展了入侵检测规则，并对攻击规划的推导过程进行了改进。实验测试表明，预先决策引擎不仅提升了无线入侵检测和防御的性能，还有效减少漏警和虚警的产生。

关键词: 入侵防御系统, 规划识别, 检测规则, 网络安全

Abstract:

Nowadays wireless intrusion prevention systems have become the research hotspot with the fast development of WLAN. In this paper，we first introduce the common attack methods for WLAN，and then present the framework of the wireless IPS with a distributed pre-decision engine，which can predict the future actions and direct active responses to these actions. We implement an improved model with extended detection rules for conducting intrusion plan and making pre-decision，by gathering wireless device information and importing supporting degree of intrusion plan in plan recognition. Experimental results showed that the distributed pre-decision engine can not only improve wireless intrusion detection and prevention performance，also reduce false negatives and false positives evidently.

Key words: intrusion prevention system, plan recognition, detection rule, network security

No Suggested Reading articles found!