【作者】 钱田芬；

【导师】 周健；

【作者基本信息】 合肥工业大学 ， 计算机软件与理论， 2007， 硕士

【摘要】 随着网络的深入发展，使得网络安全问题显得越来越突出，人们对网络安全的问题也越来越关注。面对日益增多的网络攻击，如何真正做到“网络既开放又安全”已经成为摆在世界科技人员面前的一个重要课题。安全模型是针对网络安全问题提出的解决方案，传统的安全模型是静态安全模型，对动态的安全威胁、系统的脆弱性没有应对措施。面对日益流行的分布式、协同式攻击，任何单个的安全组件防御能力是有限的，只有各安全组件实现有效的互动，构成整体安全解决方案，才能进行有效解决网络安全问题。另外研究表明：Internet网络是一个由简单规则形成的复杂网络，随着时间的推延和人们对网络安全问题的关注的增加，如何提供好的网络安全模型使其适应这样的动态变化的复杂网络环境已成为一个亟待解决的问题。本文在介绍现有的几种网络安全模型的基础上，详细分析了现有安全模型存在的问题，在复杂适用系统的基础上提出一个基于闭环控制的，以安全管理和安全策略为中心的SAP~2MDR~2C动态网络安全模型，并设计一种基于复杂适用系统的入侵检测系统应用于SAP~2MDR~2C模型中，一定程度上解决了入侵检测中的误测和漏测的问题，增加了模型的安全性能和安全等级。并利用Swarm提供的仿真环境，实现入侵检测系统聚集模块的动态仿真，对推动复杂适用系统和动态网络安全模型的进一步发展有一定的指导和借鉴意义。更多还原

【Abstract】 With the development of Internet, network security becomes more and more prominently. The people also pay more attention to the network security.Facing network attacking which increases day by day, how truly achieved "the network both open and safely" already becomes suspends in front of a world technical personnel’s important topic.The security model is aims at the solution which the network security proposed.The traditional security model is the static security model. It is not measure to the dynamic safe threat and the system vulnerability .Facing day by day popular distributional, coordination type attack, any single security module defense capability is limited,.Only when each security module realize effective interaction and constitute whole safe solution, the model can solve the network security question effectively.Moreover, the research indicated that, network is a complex network which forms by some simple rules.Along with time extending and the people to the network security question attention increase, how provides the good network security model which can adapt to such dynamic change complex network circumstances is become a question which urgently awaits to be solved.This article introduced some network security models and analyzed their liminitation. Then the author brings forward a new dynamic network security model SAP~2MDR~2C of the complex adaptive system which based on the closed-loop control.Its nucleus is security management and security policy.And it designs a new algorithm of intrusion detection based on complex adaptive system utilizes in this model.It can solved in some degree the problem of measure by mistake and missed detection; increased the model safety performance and the security rating. With using the simulation environment of Swarm, it realizes dynamic simulation of intrusion detection system. It to impels complex adaptive system and the dynamic network security model further development has certain instruction and the model significance.更多还原