已知网络入侵模式的低匹配度数据信息集挖掘平台设计  

Design of low matching degree data information set mining platform for known network intrusion pattern

作　　者：刘兴明[1] 王三虎[1] 张跃进[2] LIU Xingming;WANG Sanhu;ZHANG Yuejin(Department of Computer Science and Technology,Luliang University,Lüliang 033000,China;School of Information Engineering,East China Jiaotong University,Nanchang,330013,China)

机构地区：[1]吕梁学院计算机科学与技术系,山西吕梁033000 [2]华东交通大学信息工程学院,江西南昌330013

出　　处：《现代电子技术》2016年第18期12-16,共5页Modern Electronics Technique

基　　金：国家自然科学基金(31160200);2015年度吕梁学院校级改革项目:高校网络课程群的建设与改革(JYZD201507)

摘　　要：在已知网络入侵模式下对低匹配度数据信息集进行挖掘时,缺少对低匹配度数据信息集的处理和分类选取过程,存在挖掘不准确,效率低的问题。设计并实现了一种已知网络入侵模式下对低匹配度数据信息集挖掘平台,介绍了平台的总体硬件结构,利用数据采样预处理模块实现从源数据到挖掘数据的映射,完成离散化、数据过滤等处理过程。依据KC89C72 DIP40FILE分类器进行低匹配度数据信息集的分类,储存到SSRAM中,并以此为基础,通过数据挖掘模块对储存的低匹配度数据信息集进行确认与挖掘。软件设计过程中,对已知网络入侵模式的低匹配度数据信息集挖掘平台进行了详细的分析,并给出低匹配度数据信息集挖掘的实现过程以及程序代码。实验结果表明,该平台的低匹配度数据信息集挖掘准确率、误差率、时间及所需内存均优于传统的Fuzzing平台,具有一定的实用性。A low matching degree data information set mining platform for the known network intrusion patterns was de?signed and implemented. The structure of the overall hardware platform is introduced. The data mapping from the source data tothe mining data is implemented with the data sampling pretreatment module to complete the process of discretization and data fil?tering processing. The low matching degree data information sets are classified with KC89C72 DIP40FILE classifier,and storedin SSRAM. On this basis,the stored low matching degree data information sets are confirmed and mined by means of the datamining module. In the software design process,the low compatibility data information set mining platform for the known networkintrusion pattern is analyzed in detail. The realization process and program code of the low matching degree data information setmining are presented. The experimental results show that the low matching degree data information set mining accuracy,errorrate,time and required memory of the platform is superior to those of the traditional Fuzzing platform,and the platform has acertain practicality.

关 键 词：网络入侵模式 低匹配度 数据信息集 挖掘平台 

分 类 号：TN926.34[电子电信—通信与信息系统] TP309[电子电信—信息与通信工程]