入侵检测及防御系统模型的研究与设计

随着计算机互联网络的迅速发展,网络安全也成为我们日益重视的问题。用于检测网络安全策略的入侵检测系统也随之飞速发展,变得高度精密。本文将提出了一个与多源入侵检测系统紧密结合的防御模型。通过使用该模型可以估算出入侵的损失以及防御的成本,从而选取最佳防御系统。

The Intrusion Detection System Model and The Defense Research and Design

Along with the computer the fast development of the Internet,The Network security has become we pay more attention to the problem.For decades,IDS for testing the network security policy has evolved tremendously and has become highly sophisticated.This work presents a cost based response model that is tightly coupled with multi-source IDS.The damage cost of the intrusion and the response cost of the responses are evaluated using the dependency graph.Using several performance metrics,a response which brings the most benefit to the system is deployed.