IDS信息源的偏差分析方法

A Deviation Analysis Method for IDS Information Source

入侵检测系统 (IDS ,IntrusionDetectionSystem )是安全机制中的一道新防线 .IDS的输入数据是系统进行分析检测的基础 .在对IDS信息源统计特性进行分析之后 ,对Shewhart控制图理论进行探讨 ,并采用控制图理论对收集到的数据进行偏差分析 ,以较快的速度检测出网络上常见的各种“洪水”攻击 .

IDS (Intrusion Detection System) is a new defense layer of the security mechanism. Since the input data are the analytic basis of systems, this paper discusses the statistical characteristics of the data source of IDS. According to this analysis, a deviation analysis method using the theory of Shewhart control chart is introduced to perform intrusion detection. This method can detect the 'flooding' attacks on network in real time with less prior knowledge.