基于应对规划的入侵防护系统设计与研究

Design and research on intrusion prevention system based on adversarial planning

把应对规划引入到入侵防护系统中,提出了一种基于应对规划的入侵防护模型.在分析规划识别在入侵检测中的应用的基础上,通过把规划识别应用于入侵检测和智能规划用于入侵响应,提出了一种有机结合入侵检测和响应的入侵防护系统,并对该系统的系统架构、应用方案、技术特色等进行了深入的研究.新的入侵防护系统具有知识共享性、响应针对性、学习自主性和防护立体性等优点.

Adversarial planning is introduced in intrusion prevention system（IPS）.An intrusion prevention model is put forward.On the base of the application of planning recognition in IDS,an IPS is given by using planning recognition in intrusion detecting and using planning in intrusion response.The IPS is the organic combination of intrusion detecting and response.And then,it has made an in-depth study of the architecture,application scheme and technology feature.The IPS based on adversarial planning has the merits such as knowledge sharing,response pertinence,learning autonomy and prevention tridimensionality.