Honeypot技术在网络入侵检测系统中的应用

入侵检测是近几年发展起来的新型网络安全策略,它实现了网络系统安全的动态检测和监控,但是它具有漏报、误报和无法检测新型攻击的缺点,蜜罐的引入使得这种情况得到改善。介绍了Honeypot技术的原理和分类,并提出了一种可行的设计方案,通过Honeypot和入侵检测系统的结合应用来增强入侵检测系统的性能。

Application of Honeypot Technology in Network Intrusion Detection System

In recent years,intrusion detection technology is regarded as one of the new strategy for network security.Dynamic protection and detection in computer network are realized,but it has some defects in leaving out and ignoring alarms,making mistaken alarms and being unable to detect the new type of attacks,which are greatly improved by the use of Honeypot.The paper interprets network intrusion detection system and expounds the principle and classification of Honeypot,furthermore,it puts forward a feasible programme,in order to strengthen the function of intrusion detection system by the means of combining Honeypot with it.