入侵检测系统综述

A Survey of Intrusion Detection Systems

入侵检测在保护计算机安全方面起着重要的作用。本文首先对入侵检测的概念及分类做了介绍 ,接着概括了入侵检测系统的几种体系结构 ;为了重复利用入侵检测构件 ,DARPA提出了通用入侵检测模型 ;最后 。

Intrusion detection plays an important role in protecting computer security. This paper presents the concept and classification of intrusion detection. Some architectures of different intrusion detection systems are summarized. In order to reuse intrusion detection components, DARPA presents a common intrusion detection framework (CIDF). Finally, the shortcomings of current intrusion detection systems are discussed, and a number of areas of future research in this field are pointed out.