摘要
传统的基于模式匹配的入侵检测系统没有充分利用网络协议的规则,存在计算量大、准确率低等缺点。本文在网络协议分析的基础上,提出了基于网络协议解析的新的入侵检测系统模型。该系统能大大减少数据运算匹配量,为基于协议解析的入侵检测方法提供了一个更加广阔的发展平台。
Traditional intrusion detection based on pattern matching system does not take full advantage of network protocol rules,there are calculations and low accuracy shortcomings.In this paper,network protocol analysis based on the proposed network-based protocol analysis,new intrusion detection system model.The system can greatly reduce the amount of data matching operations,based on protocol analysis,intrusion detection method provides a more extensive development platform.
出处
《网络安全技术与应用》
2010年第6期28-30,共3页
Network Security Technology & Application
关键词
入侵检测
协议解析
模式匹配
算法设计
intrusion detection
Protocol Analysis
pattern matching
algorithm
