無線網路下自動化入侵偵測系統設計與實作

Abstract

現今每個人都享受著無線網路所帶來的便利性，但大多數的人都會忽略存在於無線網路上的威脅，由於無線網路屬於開放性的環境，若有攻擊者處於無線網路的涵蓋範圍下，就可以針對無線網路範圍下的任何主機進行攻擊行為。為了要早一步發現來自於網路上的惡意攻擊行為，進而發展出入侵偵測系統(Intrusion Detection System， IDS)，但IDS只能偵測到是否有惡意攻擊行為，卻無法針對此行為做隔離動作，這樣一來對於網路內部的主機造成的威脅性不減反增。本研究提供在無線及有線網路下的主動式入侵偵測系統，若偵測到有惡意攻擊行為系統可將此行為做阻隔動作，並記錄下此攻擊行為，作為往後偵測攻擊行為的依據，也可監控處在該網路底下的主機狀態。

Everybody enjoys the wireless convenience brought of network now, but most people will neglect the threat of the existence in the wireless network, because the wireless network belongs to the open environment, if there are assailants under the range of containing of the wireless network, can carry on the attack to any host computer under the wireless network range . In order to want early step to find that come from the hostile attack on the network, and then development comes in and goes out and invades and detects and examines the system (Intrusion Detection System , IDS ), but IDS can only detect and have a hostile attack to examine to , but unable to do movements of isolating to this behavior, do not reduce increasing to the threat that the host computer within the network causes instead in this case. The active invasion offered under the wireless and wired network in this research detects the system of examining, can do movements of separating of this behavior if detect and examine to and have hostile attack systems, and note this attack, as detecting the basis of examining the attack backward, can control and is in the host computer state under this network . This paragraph describes the major work in your paper.