基于信息融合的分布式入侵检测体系结构研究

the Study of Distributed Intrusion Detection Framework Based or Information Fusion

随着计算机与网络技术的发展,入侵技术也越来越先进。许多入侵行为都具备反检测的能力,这些行为会模仿被入侵体系的正常用户行为或通过多台主机联合攻破被入侵系统。针对较复杂的入侵行为,仅靠一个传感器来提供信息很难与正常用户行为进行识别,必须通过多传感器信息融合的方法来提高对入侵的识别能力,同时降低误判率。

With the development of the computer and network technology,many hackers intrude the network.Some hackers intrude the network by imitating normal user action or making a intrusion with others.I’ts difficult to detect a complex intrusion only depending a sensor,we should fuse more information from more sensors,so that improve the capacity to the intrusion lower the false alarm rate.