入侵检测系统的主要问题与基本对策

The main problems and basic strategies of intrusion detection sytem

入侵检测系统已是当前网络安全体系中的一个重要组成部分,但当前的入侵检测系统在完备性、灵活性以及协作能力等方面都存在严重问题。加强不同安全技术以及分布异构系统之间的协作能力,提高系统的智能化和人性化水平等策略可有效地提高主动性、灵活性以及系统的整体性能,降低对完备性的要求。未来的入侵检测系统应以网络整体安全为最终目标,作为一个集成多种安全技术的综合安全系统来设计和运行,并具有智能控制结构和免疫能力。

At present,IDS is one of the most importan proportios in the architecture of network security.But there still exist serious problems in its integrality,flexibility and the ability of cooperation.Some strategies,such as those enhancused to the ability of cooperation between different kind of technologies and the heterogeneous systems,improve the level of intellgence and humanity,can effectively strengthen activity,flexibility,the performance of the whole system and reduce the demand for integrality..Future IDS should take the security of the whole network as the end object,designed and used as a combined security system,which contains multiplicate security technologies.This system should possess the structure of intelligent control and the ability of immunity.