网络入侵检测与对抗的技术及实现

给出一个丛于边界路由器的网络入侵检测、网络异常检测及对抗联动系统的设计方案，详细介绍了应用于该系统的关健技术及算法，包括基于零拷贝思想的捕包技术、状态机匹配技术以及网络异常检测报警阈值的动态调节算法；同时给出了在大流量网络环境下，该系统的改进设计方案。

Technique and Realization of Net Intrusion Detection and Antagonize

This paper proposes a linkage system design about Web intrusion detection and antagoniz ation based on boundary router. And exhaustively introduces key technique and arithmetic that are used in this system. Including the catching data bag based on zero times copying thinking, the state machine matching technique and the arithmetic about dynamic changing alarm valve of checking net abnormity. This paper proposes the system designing plan under a large flow Web circumstance.