摘要
该文对入侵检测常用检测方法做了简单概述,根据蠕虫与流量的关系,分析了基于异常流量检测蠕虫入侵的可行性,提出了一种基于异常流量的蠕虫检测模型,最后对将来需要进一步研究的工作提出了一些建议和设想。
This paper states simply common methods of Intrusion Detection,and analysis the feasibility of worm intrusion detection based on abnormal network traffic.A model of detection system based network abnormal traffic was proposed against network worm.At last, more advices for work in the future are contributed.
出处
《网络安全技术与应用》
2006年第4期31-33,共3页
Network Security Technology & Application
关键词
蠕虫
入侵检测
异常流量
流体特征
Worm
Intrusion detection
abnormal traffic
hydrodynamics feature