一个自适应网络入侵检测和防御系统的研究与实现

A self-adaptive network intrusion detection and prevention system

针对目前入侵检测系统入侵检测准确性低,误报率高,在检测到入侵时只能被动响应,不能采取积极主动的防御措施等特点,提出一个具有自适应、主动响应能力的网络入侵检测和防御系统模型,称为anidp。并详细讨论该模型的体系结构、特点以及实现技术等。

A self-adaptive active response network intrusion detection and prevention system model called anidp is proposed to overcome the problems existing in the current network intrusion detection systems such as the inaccuracy in the intrusion detection and lack of the active response to the attacks. The system architecture, feature and implementation methods of the model are discussed in detail.