基于混合检测模式的入侵检测模型研究

Intrusion Detection Model Research Based on Mixed Detection Mode

本文分析了目前常用的入侵检测技术，并对其性能参数进行了详细的分析，提出了基于混合检测模式的入侵检测模型，该检测模型综合使用异常检测模式和误用检测模式，两种模式的综合使用，弥补各检测模式所存在的不足，基于混合检测模式的使用能够极大的提高入侵检测系统的网络攻击检测率，同时大大的降低了网络攻击检测的误报率，具有较强的实用性。

This paper analyses the frequently-used intrusion detection technology function in details.The author has proposed intrusion detection model based on mixed mode,which combines the abnormal detection mode with misuse detection mode.The integrated use of these two modes makes up for disadvantages of both modes.The intrusion detection model based on mixed mode could extremely improve network attack detection rate of intrusion detection system,in the meanwhile it reduces the network attack false positive rate and has strong practicability.