一种实时入侵检测专家系统的设计与实现

Design and Implementation of a Real-time Intrusion Detection Expert System

该文在分析几种常见入侵检测方法的基础上,设计并实现了一种实时入侵检测专家系统,给出了详细的设计方案和实现方法。最后,分析了常见的入侵,并提供用于检测主机/端口扫描的规则集。实验结果表明,该系统能够快速有效地发现并报告多种入侵,能集成到网络安全产品中。

On the basis of analyzing of the general intrusion detection method,this paper designs and implements a real-time intrusion detection expert system.A detailed designing scheme and implementation method are provided.At last,this paper analyzes some general intrusion,and describes some rules about port scan.The experimental results reveal that the system can detect and report variety of intrusions,can be integrated into network security product.