基于CVE的入侵检测系统规则库的实现

Implement of the CVE-Based Intrusion Detection Expert System Rule Base

针对入侵检测/专家系统的不足,本文通过对CVE标准漏洞列表进行深入的讨论研究,采用新型规则结构,提出建立基于CVE特征的入侵检测专家系统规则库,它具有结构简洁,易于更新的特点。

By analyzing the problem existing in the IDES and researching o CVE (Common Vulnerabilities and Exposures), this paper design the rule database of Intrusion Detection Expert system based on CVE signature and implement the rule database.