入侵检测系统在网络安全中的研究

Study on the intrusion detection system in network security

网络安全面临的最重要的威胁主要是不法分子和黑客对网络中应用系统的入侵。传统的防护办法主要是以禁止策略方式进行防护,但仅通过禁止策略方式实现的网络安全防护体系是不够的。入侵检测随着网络安全技术的发展逐步成熟起来,该技术是对不法分子的攻击在没有完成的情况下逐渐进行拦截的,防护效果非常明显。文章首先对网络入侵进行分析,其次对入侵检测技术原理进行了阐述,最后对入侵检测系统进行了研究。

The most important threat to the network security is the invasion of illegal elements and hackers on the network application system. The traditional method of protection is mainly to prohibit the way of protection, but only through the prohibition of the way to implement the network security system is not enough. With the development of network security technology, the technology of intrusion detection is gradually mature, and the technology is the attack on illegal elements in the case of not complete the gradual interception, the protective effect is very obvious. In this paper, firstly, the network intrusion is analyzed, and then the principle of intrusion detection technology is expounded. Finally, the intrusion detection system is studied.