基于攻击树的分布式入侵检测系统的研究

Attack Tree Based of Distributed IDS Research

入侵检测是计算机安全领域的一个重要技术,也是当前计算机安全理论研究的一个热点,首先介绍分布式入侵检测发展现状,然后引入攻击树来表示入侵,并提出一个基于攻击树的攻击描述语言。并在此基础上建立了基于攻击树的分布式入侵检测系统结构。

With the development of computer technology and the explosion of Internet, computer security becomes more and more important. The concept of attack trees is introduced first. Then based on the attack tree model, an attack specification language is constructed using this language, we define attack template library and build a structure of attack tree-based of distributed intrusion detection system.