枣庄学院一卡通中网络安全的分析研究

【作者】 李峰；

【导师】 姜宁康； 杜德慧；

【作者基本信息】 华东师范大学 ， 软件工程， 2008， 硕士

【摘要】 作为数字化校园建设的重要组成部分,校园一卡通系统是实现校园信息化的基础工程,是学校实现管理提升的重要工具。但是,在多数高等院校,由于办学规模、建设资金等方面的限制,加之缺乏统一管理,造成各个部门独立发卡,独立结算,一人多卡,给教工、学生带来极大不便,同时导致工作效率低下,资源浪费严重。高校校园网的建成,卡片应用技术的逐渐成熟,银校合作力度的逐步加大,为校园一卡通系统的发展创造了成熟条件。本文以枣庄学院一卡通系统的网络安全为研究对象,结合网络的实际情况,对一卡通系统及其网络安全进行了全面的分析。详细介绍了一卡通系统的框架结构,然后依据框架的结构依次介绍了组成该框架的各个模块,重点分析了该系统在实际应用中面临的网络安全问题。由于数据挖掘技术具有可以处理大规模的数据量,而且不需要用户提供主观的评价信息,善于发现容易被主观忽视和隐藏信息的优点。另一方面,入侵检测技术是一种动态的安全防护手段,具有能主动寻找入侵信号,给网络系统提供对外部攻击、内部攻击和误操作的安全保护的优点。因此,本文集成数据挖掘和入侵检测技术,针对一卡通网络中应用服务器遭受黑客攻击的问题,采取“在线离线结合,误用异常互助,分类聚类兼顾”的思想,提出了一种基于主机的入侵检测系统的设计方案。更多还原

【Abstract】 As an important part of digital urban construction, campus smart card applying system is an essential and important tool to improve management efficiency. But in most universities, they independently give out the card and deal with accounts dependently, for the limitation of the scale of running a school, the lack of construction funds, and the lack of unified administration. It makes faculties and students inconvenient, which leads to low working efficiency and serious resource waste.This paper takes the network security of campus card in Zao Zhuang University as the researching object. According to the actual condition of network, this paper firstly gives a brief introduction about the campus card system and the network security. Then it introduces the framework of the campus card system and ordinally describes each module that composes the frame. After that it analyses the problems of network security in actual use. Data mining technology can process multi-datas without objective appraisal information from users and can detect the information that are usually ignored and concealed. On the other hand, intrusion detection technology is a dynamic safeguard system. It can actively detect the intruding signals, protect the network system from inter and outer assaults and mis-handling. Aiming at the problem of hacker attack on the server in campus card network, this essay conbines data mining technology and intrusing detection technology together, adopts the thinking that combines online classified misusing detection with offline clustering abnormal detection, and puts forward a devising project of intrusing detection technology based on the host computer.更多还原