小型分布式入侵检测系统的构建

Construction of Small-typed Test System against Intrusion

在网络技术发展的同时黑客攻击技术也在飞速发展,相辅相承的网络安全也从无到有。现有的网络安全产品已经为网络建立了一道安全防护屏障,但这些产品对快速发展的黑客攻击仍是防不胜防。这主要是缺少了非常重要的一环——对网络活动的监视和审计,对违规行为和入侵行为进行预警和响应,于是提出了计算机和网络安全的第二道防线——入侵检测系统。入侵检测技术是继“防火墙”、“数据加密”等传统安全保护措施后新一代的安全保障技术。它对计算机和网络资源上的恶意使用行为进行识别和响应,它不仅检测来自外部的入侵行为,同时也监督内部用户的未授权活动。

With the development of Hacker attack technology, the forthcoming productions in network security have already built a security dike, but these productions can not protect the Hacker attack very well. The security specialists think after assay： there is miss a very important moment the oversight and audit for the network activity, the fore warm and response for the violating the rules and invading behavior, so they expound the second defense line for the computer and network the intrusion detection system. The Intru- sion Detection is a new security technology; apart from tradition security protect technology, such as firewall and data crypt. IDS watch the computer and network traffic for intrusive and suspicious activities. It not only detects the intrusion from the extranet hacker, but also the intranet users. We will introduce how to built a base network＇s intrusion detection system with open code software in the internet.