基于Linux系统的DoS攻击检测和审计系统  

DoS Attack Testing and Auditing System Based on Linux

作　　者：黄月[1] 刘卫国[1] 

机构地区：[1]中南大学信息科学与工程学院,长沙410083

出　　处：《计算机系统应用》2011年第7期35-38,共4页Computer Systems & Applications

基　　金：国家自然科学基金(61073187)

摘　　要：在分析传统入侵检测系统不足的基础上,提出了基于Linux操作系统的DoS攻击检测和审计系统。网络安全检测模块通过统计的方法检测内网发起的DoS攻击行为,网络行为规范模块过滤用户对非法网站的访问,网络行为审计模块则记录内网用户的非法行为。实验证明,相比传统的入侵检测系统,该系统能够有效地检测出DoS攻击,并能规范网络用户行为和有效审计非法网络行为。With analysing the weakness of traditional intrusion detection system,a Linux-based DoS attack testing and auditing system is proposed.The network security detection module is used to detect the DoS attack from intranet,the network behavior regulation module is used to filter the behavior when users access to the illegal websites and the network behavior audit module is used to record the illegal behaviors of intranet users.Experiments show that the system has good performance in detecting DoS attacks,and the system can also regulate and audit illegal behaviors of the network users by contrast with the traditional intrusion detection system.

关 键 词：LINUX系统 入侵检测 拒绝服务攻击 网络行为审计 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]