入侵检测系统的研究

目前,网络安全是网络研究的热点,而随着对计算机系统弱点和入侵行为分析研究的深入,入侵检测系统在网络安全中发挥着越来越重要的作用,并成为处理网络安全问题的有效工具,对传统的安全防范技术起了重要的补充作用。该文介绍了研究入侵检测系统的意义,分析了入侵检测系统的一般工作流程,并给出了入侵检测系统的几种分类方法。入侵检测系统也有自身的局限性并且面临着诸多挑战。文章最后阐述入侵检测系统有待解决的关键问题以及入侵检测系统在我国网络安全中的重要地位。

Study of Intrusion Detection System

Nowadays, network security is becoming a hot area in network researches. With the comprehensive analysis of the vulnerability of the network and intrusion behaviors, the Intrusion Detection System (IDS) becomes more and more important in network security. IDS is becoming an effective approach for dealing with the problems of network security and is also an important supplement to the traditional network security technologies. In this paper, the principles of IDS are described and classifications of IDS are pointed out. In the mean time, this young field also has its weakness and meets many challenges today. Finally, the development trend of IDS and our country's network security is briefly introduced.