入侵检测系统报警信息融合模型的设计与实现

Design and Implementation of Intrusion Detection System Alerts Fusion Model

开展入侵检测系统报警信息融合技术的研究 ,对解决目前入侵检测系统 (IDS)存在的误报、漏报、报警信息难管理、报警信息层次低等问题 ,以及提高网络预警能力等均具有十分重要的意义。首先分析了目前入侵检测系统存在的问题 ,提出了进行报警信息融合的必要性 。

It is very important to study the technologies of IDS (Intrusion Detection System) alerts fusion,which can resolve the problems of current IDS,such as false positive, false negative,management hardly,creating alerts in low level,and it can increase network warning ability.Some problems in current IDS and necessity of doing alerts fusion are presented.An IDS alerts fusion visible model is presented,which provides solid base for passing check and acceptance successfully.