入侵检测技术的研究

入侵检测系统用于检测对计算机系统和网络的攻击。作为一种新型的信息系统安全机制,通过监控这些信息系统的使用情况,来检测信息系统的用户越权使用以及系统外部的入侵者利用系统的安全缺陷对系统进行入侵的企图。本文首先分析了入侵检测系统的主要模型及其实现技术,然后,对网络环境下基于代理机制的入侵检测模型及其主要实现技术进行了讨论。

The Study on Intrusion Detection Technology

The aim of intrusion - detection systems is to detect attacks against computer systems and networks. As a novel security mechanism to provide provably secure information systems, intrusion - detection systems have the task of monitoring the usage of such systems. They detect user's attempts of the information systems or external parties to abuse their privileges or exploit security flaws. In this paper, the mainly design model and implement technology of Intrusion Detection System are discussed, Then the Intrusion detection model based on the agent mechanism and its key implement technology are presented.