两种典型的入侵检测方法研究

Research on the Two Typical Methods of the Intrusion Detection

论述了入侵检测的基本概念、模型框架和对现有入侵检测技术、方法进行了分类。重点论述了两种典型的入侵检测方法—异常行为检测方法和比较学习检测方法的基本原理,并在此基础上实现了一个实际的入侵检测专家系统。

The basic concept and the model frame of intrusion detection,give a taxonomy of present intrusion detection technologies and methods are presented.And then the two typical methods of the intrusion detection on its importance are discussed-the basic concept of anomaly detection method and compared study detection method.S o a practice of intrusion detection expert system is implemented based on it.