一个检测分布式攻击的入侵检测模型的设计

Design of an intrusion detection model for detecting distributed attacks

给出了一个检测分布式攻击的入侵检测系统模型的设计,该模型采用基于特征的方法,能够实现数据收集方法在单独场所所不能实现的对分布式攻击的检测。跟其他方法相比,该方法能够极大的降低入侵检测式的通信量,从而简化了通讯安全管理的复杂性。

This paper presents the design of an intrusion detection model adopting a signature-based approach for detecting distributed attacks, which aims at detecting distributed attacks that cannot be detected by data collection mode at any single place. Comparing with other approaches, the communication imposed by intrusion detection is greatly reduced and the management of transmission security in this model is simplified.