Design And Implementation Of Protocol Anomaly Detection

As the development of network technology, the network security problems become increasingly severe. To solve these problems, people develop many security technologies and models. But the traditional security models cannot keep up with the rapid development of modern network technology. Compared to the traditional methods, the protocol anomaly detection is more efficient and faster. It is more easy to adapt the high load of network.Based on the analysis of detection technologies of existing IDS, a new protocol anomaly detection technology based on DFA is introduced into this paper. And we have achieved the following results on our research:1. Research on standard protocol of HTTP. We analyze the RFC2616 document about HTTP and create the standard model of HTTP.2. Research on Intrusion Detection System based on DFA algorithm. As DFA method is simpler than other methods, it can enhance system speed significantly. But it cannot control the size of the model. We invent an advanced DFA algorithm.3. We do the training for the model and do some tests on it. And we analyze the test results.As the research above, we hope it can do some actual meaning for the protocol anomaly detection and experiment work.