利用协议分析提高入侵检测效率

Improving the Efficiency of Intrusion Detection by Using Protocol Anal ysis

论文分析了在入侵分析中单独使用模式匹配方法存在的弊端,并给出了一种改进的检测方法,即结合使用协议分析与模式匹配的分析方法,同时给出一个例子来说明分析的实现过程。

The paper analyzes the weakness when only uses pattern matching in intrusion analysis and presents an im-proved approach that combines protocol analysis and pattern matching to detect attacks.At the same time it gives an ex-ample to show how to use this approach.