基于Petri网的入侵检测模型研究

随着计算机网络的广泛应用,非法的入侵与攻击行为不断发生,严重威胁着网络信息的安全,对入侵和攻击进行检测与防范已经成为刻不容缓的重要课题。讲述了Petri网(PN)和有色Petri网(CPN),通过将入侵分为“存在”,“顺序”,“偏序”三种类型,描述入侵检测系统(IDS)中的攻击模式用Petri网实现,并且给出了使用有色Petri网描述攻击模式。

The Intrusion Detection System Module Based on Petri Net

Along with the broad use of computer network,illegal invasions and the attacks unceasingly occur,which are threatening the network information security seriously.How to detect and keep away of invasions and attacks has already become an urgent and important topic.In this paper,Petri Net and Colored Petri are briefly introduced.By classing invasions into categories of "existence","sequence",and "partial order",how to realize the attack pattern by the Petri Net in IDS was described,then how to use the colored Petri Net to describe the attack pattern is shown in the paper.