入侵网络特征变化信号提纯方法研究

Purification method of intruded network feature variation signal

由于受到网络入侵类型多变的影响,传统的网络入侵后异常信号检测系统调制能力和检测稳定性较差。设计基于人工免疫的网络被入侵后异常信号检测系统。系统中的信号采集模块利用FPGA设计入侵参数,通过该参数采集被入侵网络中的全部信号。调制模块对信号采集模块传输来的信号进行拆解、放大和滤波操作,生成待检测信号集合,同时对调制模块中计时器电路和滤波电路进行设计,异常信号检测模块利用TMS320VC5402芯片,对待检测信号集合进行异常信号检测、存储和报警,调制模块和异常信号检测模块均基于人工免疫设计。同时编写了人工免疫模型的组建代码,利用人工免疫模型对系统工作流程进行筛选。实验结果表明所设计的系统拥有较强的调制能力和检测稳定性。

The modulating capacity and detecting stability of the traditional abnormal signal detection system after network is intruded become poor due to the influence of the variable network intrusion types. The artificial immunity based abnormal signal detection system dealing with intruded network was designed. The signal acquisition module in the system uses FPGA to de- sign the invasion parameters to acquire all the signals in the intruded network. The modulating module is used to disassemble, amplify and filter the signals coming from the signal.acquisition module to generate the signal set under detection. The timer circuit and filtering circuit in the modulating module were designed. The TMS320VC5402 chip is used by the abnormal signal detection module to perform the abnormal signal detection, storage, and alarming. The modulating module and anomaly signal detection module were designed based on artificial immunity. The forming code of the artificial immunity model was compiled. The artificial immunity model is used to screen the system workflow, The result of simulation experiment shows that the system has strong modulating capacity and detecting stability.