异常检测技术的研究与发展

Research on and development of anomaly detection

论述了异常检测技术的基本概念与发展情况 ,讨论了几种常用的异常检测技术 ,介绍了它们实现的方法和模型框架 ,并比较了现存的各种方法的优缺点 ,由分析可知 ,只有建立一种多结构、多层次的立体防范框架 。

The basic concept and the development of anomaly detection which is one of the methods of intrusion detection are presented. Some anomaly detection technology in common use is discussed, with the method to implement it and the model frame introducted, and performance of the available technology compared. A conclusion is drawn that the system security can be achieved only by building a multilayer defense framework.