包过滤在网络入侵检测中的设计与实现

Design and realization of the packet filter in the net intrusion and detection

随着Internet的越来越普及和黑客攻击的不断出现,网络安全也愈来愈受到人们的关注,现有的大多数安全方法主要是面对外部用户的,而在实际的大型网段内,更多的攻击是来自内部人员。网络入侵检测系统就是用来对付这种情况的一种安全措施。文章首先对网络入侵检测做一个基本的介绍,在此基础上详细地讨论了包过滤在网络入侵检测中的设计和实现,并提出一些技巧和方法用以提高包过滤的效率。

With the popularization of the Internet and the continual emergence of the attack by hackers,more and more attention has been drawn to the net security.Presently,most of the security countermeaures are against the outer users,but in fact in great net domains,attack comes mainly from the inner users. The net intrusion and detection system is designed for dealing with such inner attack. In the paper,an introduction of net intrusion and detection is given briefly. Then the design and realization of the packet filter in the net intrusion and detection are discussed in detail,and some skills to improve the speed of the packet filter are presented.