基于P2DR模型的分布式入侵检测系统设计与实现

Design and Implementation of Distributed Intrusion Detection System Based on P2DR Model

文章设计并实现了一个入侵检测系统———SC-IDS,该系统采用滥用和异常相结合的检测方法,分布式的体系结构,符合P2DR模型。克服了传统系统的缺点,如误警率和漏警率高、可扩展性弱、不能适应大规模网络、不能与其它安全产品协同工作等。在实际应用中取得了良好效果。

This paper establishes and accomplishes the intrusion detection system,SC-IDS.It combines the knowledgebased IDS and anomaly-based IDS into a system,it accords with P2DR model and the distributed framework.h surmounts the shortcoming of traditional ways of detection,for example,high false positive and false negative rate;can＇t adapt large-scale network;can＇t cooperate with other security product etc.It gains a good effect after operation.