Ad Hoc网络与有线网络互连中的入侵检测

Intrusion Detection For the Interlinkage Between Ad Hoc Networks and Lineate Networks

针对Ad Hoc网络与有线网络互连中面临的安全问题,致力于建立一个适合两网互连的入侵检测系统,构建了Ad Hoc网络与有线网络的互连模型,并提出了适用于该互连模型的入侵检测实施方案。该方案采用基于统计的异常检测技术和基于模式匹配的误用检测技术相结合的入侵检测技术,减少了单纯使用某种入侵检测技术时的漏报率和误报率,从而提高系统的安全性。

In this paper, the security issues in the interlinkage between Ad Hoc networks and lineate networks are investigated. An intrusion detection system for the interlinkage between two networks is established and a model which can realize the interlinkage between Ad Hoc and lineate networks is presented. This scheme is based on combination of misuse detection and anomaly detection. It combines the two technologies to reduce the false positive rate and the false negative rate in only one detection technology, and then security of intrusion detection system is improved.