入侵检测关键技术研究与实现

Research and Implementation of Key Technology for Intrusion Detection System

目前的网络入侵检测系统(NIDS)主要存在误报,漏报率高、自身的性能难以适应迅速增长的网络流量的需要等缺点,论文以提高检测的速度和准确率为目的对网络入侵检测简单模型进行分析,针对其三个关键处理点提出了高速网络数据处理技术、高准确度的检测技术、高速模式匹配技术,并在文章最后展望了入侵检测将来可能使用的一些关键技术。论文所讨论的关键技术得到了比较好的运用,并建立了完善的原型系统。

The bottle-neck problems a bout existing Network Intrusion Detection System(NIDS)are false positives and false negative and that it can not keep up with the increasing network throughp ut.The paper analyses a simple model of NIDS aimed at improving its detecting s peed and exactness.Three techniques namely highly speed network data han-dle, highly credible detection,and highly speed pattern match are proposed to improv e the performance of NIDS.Finally,some technique possibly used in the future IDS are given.