NID中基于Linux平台的数据包截获方法  

A Data Packet Interception Method Based on Linux Platform in Network Intrusion Detection

作　　者：尹益燕 赵冬梅[2] YIN Yi-yan;ZHAO Dong-mei(Software Institute,Hebei Engineering and Technology Institute,Hebei Shijiazhuang 050091,China;College of Computer and Cyber Seurity,Hebei Normal University,Hebei Shijiazhuang 050024,China)

机构地区：[1]河北工程技术学院软件学院,河北石家庄050091 [2]河北师范大学计算机与网络空间安全学院,河北石家庄050024

出　　处：《计算机仿真》2023年第10期394-398,共5页Computer Simulation

摘　　要：截获数据包的质量过低会导致网络入侵检测结果错误,为了提升截获数据包质量,增强网络入侵检测性能,提出网络入侵检测中基于Linux平台的数据包截获方法。结合Linux平台截获数据包,接通Linux平台的网络数据接口,根据接口处数据缓冲原理判定数据初始化系数,待初始化系数稳定在可监督范围内后,启动本地网络截获模式,通过似然函数初步截获网络数据。构建数据包传输最大效率公式,利用RPL跨层优化机制提升数据包传输效率,将优化后的数据包输入MLP神经网络中,实现数据包截获。仿真结果表明,所提方法的数据包截获准确率高、截获率高。If the quality of intercepted data packets is too low,the result of network intrusion detection will be wrong.In order to improve the quality of intercepted data packets and enhance the performance of network intrusion detection,a data packet interception method based on Linux platform in network intrusion detection is proposed.Intercept data packets in combination with the Linux platform,connect the network data interface of the Linux platform,determine the data initialization coefficient according to the data buffer principle at the interface,start the local network interception mode after the initialization coefficient is stable within the supervised range,and preliminarily intercept the network data through the likelihood function.The maximum efficiency formula of packet transmission is constructed,the RPL cross layer optimization mechanism is used to improve the packet transmission efficiency,and the optimized packet is input into MLP neural network to realize packet interception.Simulation results show that the proposed method has high packet interception accuracy and high interception rate.

关 键 词：数据包截获 跨层优化机制 传输效率 网络入侵检测 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]