蒋成

摘 要： 由于受到网络入侵类型多变的影响，传统的网络入侵后异常信号检测系统调制能力和检测稳定性较差。设计基于人工免疫的网络被入侵后异常信号检测系统。系统中的信号采集模块利用FPGA设计入侵参数，通过该参数采集被入侵网络中的全部信号。调制模块对信号采集模块传输来的信号进行拆解、放大和滤波操作，生成待检测信号集合，同时对调制模块中计时器电路和滤波电路进行设计，异常信号检测模块利用TMS320VC5402芯片，对待检测信号集合进行异常信号检测、存储和报警，调制模块和异常信号检测模块均基于人工免疫设计。同时编写了人工免疫模型的组建代码，利用人工免疫模型对系统工作流程进行筛选。实验结果表明所设计的系统拥有较强的调制能力和检测稳定性。

关键词： 网络入侵； 异常信号； 检测系统； TMS320VC5402

中图分类号： TN926?34； TN815 文献标识码： A 文章编号： 1004?373X（2016）24?0154?04

Purification method of intruded network feature variation signal

JIANG Cheng

（Hubei Engineering University， Xiaogan 432000， China）

Abstract： The modulating capacity and detecting stability of the traditional abnormal signal detection system after network is intruded become poor due to the influence of the variable network intrusion types. The artificial immunity based abnormal signal detection system dealing with intruded network was designed. The signal acquisition module in the system uses FPGA to design the invasion parameters to acquire all the signals in the intruded network. The modulating module is used to disassemble， amplify and filter the signals coming from the signal acquisition module to generate the signal set under detection. The timer circuit and filtering circuit in the modulating module were designed. The TMS320VC5402 chip is used by the abnormal signal detection module to perform the abnormal signal detection， storage， and alarming. The modulating module and anomaly signal detection module were designed based on artificial immunity. The forming code of the artificial immunity model was compiled. The artificial immunity model is used to screen the system workflow. The result of simulation experiment shows that the system has strong modulating capacity and detecting stability.

Keywords： network intrusion； abnormal signal； detection system； TMS320VC5402

当今社会已进入到网络时代，各行各业的网络信息化建设已成为提高企业竞争力的有效途径[1]。与此同时，网络易被入侵的弊端使得企业中重要信息无法被私密保存，各行各业开始期待着一种能够对网络被入侵后异常信号进行有效检测的系统[2]。

传统的网络入侵后异常信号检测系统包括：文献[3]研发基于半径动态检测的网络入侵后异常信号检测系统；文献[4]基于危险理论研发网络入侵后异常信号检测系统；文献[5]基于动态取证研发网络入侵后异常信号检测系统。……