分布式入侵检测系统的研究

Research of Distributed Intrusion Detection Systems

入侵检测技术是一种新的安全保障技术,它用于对计算机和网络资源上的恶意使用行为进行识别和响应.文章在深入研究分析公共入侵检测框架理论和现有入侵检测系统实现策略的基础上,提出一种基于部件的入侵检测系统,具有良好的分布性能和可扩展性.

The Intrusion Detection is a new security technology. The Intrusion Detection Systems (IDSs) can watch the computers and network traffic for intrusive and suspicious activities.Basing on the research of Common Intrusion Detection Frame (CIDF) and the implement strategy of intrusion Detection System, we design a component-oriented Intrusion Detection System, with good distributed and scalable ability.