基于MIB-Ⅱ的网络安全入侵检测策略  

Network Intrusion Detection Strategies Based on MIB-Ⅱ

作　　者：俞承志[1] 王淑静[2] 宋瀚涛[1] 

机构地区：[1]北京理工大学信息科学技术学院计算机科学工程系,北京100081 [2]中国航空结算中心,北京100028

出　　处：《北京理工大学学报》2004年第8期696-700,共5页Transactions of Beijing Institute of Technology

基　　金：国家部委预研项目(2.4.33)

摘　　要：为了解决SNMPv1和SNMPv2的安全性问题,同时避免采用SNMPv3的复杂性和缺乏支持性,提出了一种基于MIB- 的网络安全入侵检测策略.该策略采用普遍支持的SNMPv1协议,通过分析设备MIB- 的相关信息,从TCP/IP协议集的数据链路层、网络层、传输层和应用层对网络安全进行多层次监控.实验结果表明,该策略能及时发现网络入侵,适合中小型网络的安全管理.A network intrusion detection strategy based on MIB-Ⅱ is proposed. It solves the security problems of SNMPv1 and SNMPv2, and avoids using SNMPv3 that is complicated and only partly supported by manufacturers. SNMPv1 is adopted in the proposed strategy because it is widely supported by manufacturers. By analyzing the data from MIB-Ⅱ, the security of network can be monitored from the data link layer, network layer, transport layer and application layer of TCP/IP protocols. Experimental results show that the proposed strategy can detect network intrusion in time and fit into the security management of small and medium sized networks.

关 键 词：SNMPV1 MIB-Ⅱ TCP/IP协议 网络安全 多层次监控 

分 类 号：TP393.07[自动化与计算机技术—计算机应用技术]