NID中基于Linux平台的数据包截获方法

A Data Packet Interception Method Based on Linux Platform in Network Intrusion Detection

截获数据包的质量过低会导致网络入侵检测结果错误,为了提升截获数据包质量,增强网络入侵检测性能,提出网络入侵检测中基于Linux平台的数据包截获方法。结合Linux平台截获数据包,接通Linux平台的网络数据接口,根据接口处数据缓冲原理判定数据初始化系数,待初始化系数稳定在可监督范围内后,启动本地网络截获模式,通过似然函数初步截获网络数据。构建数据包传输最大效率公式,利用RPL跨层优化机制提升数据包传输效率,将优化后的数据包输入MLP神经网络中,实现数据包截获。仿真结果表明,所提方法的数据包截获准确率高、截获率高。

If the quality of intercepted data packets is too low,the result of network intrusion detection will be wrong.In order to improve the quality of intercepted data packets and enhance the performance of network intrusion detection,a data packet interception method based on Linux platform in network intrusion detection is proposed.Intercept data packets in combination with the Linux platform,connect the network data interface of the Linux platform,determine the data initialization coefficient according to the data buffer principle at the interface,start the local network interception mode after the initialization coefficient is stable within the supervised range,and preliminarily intercept the network data through the likelihood function.The maximum efficiency formula of packet transmission is constructed,the RPL cross layer optimization mechanism is used to improve the packet transmission efficiency,and the optimized packet is input into MLP neural network to realize packet interception.Simulation results show that the proposed method has high packet interception accuracy and high interception rate.