一个基于专家系统的入侵检测系统的实现

Construction of an Expert System Based Instrusion Detection System

入侵检测系统是传统被动方式的网络安全检测手段的重要补充 ,它是一种主动、实时、自动检测入侵行为的工具和手段。本文论述了两种入侵检测方法———异常行为检测方法和比较学习检测方法的基本原理 ,同时根据这两种网络安全检测方法 ,采用专家系统技术 ,构筑了一个实际的网络监控系统的具体实现 。

Intrusion detection system is an important supplement of network security detection measures. The principles of two intrusion detection methods--abnormal behavior detection and comparison study detection are discussed. According to the two security detection methods, an actual network supervision and control system is contructed while the expert system is used.