| NIDS中的扫描攻击分析与检测技术研究 |
| |
| 引用本文： | 蔡洪民,伍乃骐,滕少华.NIDS中的扫描攻击分析与检测技术研究[J].微计算机应用,2007,28(2):220-224. |
| |
| 作者姓名： | 蔡洪民 伍乃骐 滕少华 |
| |
| 作者单位： | 1. 广州中医药大学信息技术学院,广州,510006
2. 广东工业大学机电学院,广州,510090 |
| |
| 摘 要： | 介绍了检测端口扫描和操作系统扫描的原理和方法，实现了一个检测端口扫描和操作系统扫描的模型，该方法通过捕捉网络数据包进行分析然后匹配各类SNORT扫描规则，从而达到有效地检测出各类扫描攻击的目的。最后，文章介绍了设计该模型的意义及展望。
|
| 关 键 词： | 网络安全 端口扫描 OS扫描 扫描检测 |
| 修稿时间： | 2005-04-132005-07-22 |
Research of Analysis and Detection of Scanning Attack of NIDS |
| |
| CAI Hongmin,WU Naiqi,TENG Shaohua.Research of Analysis and Detection of Scanning Attack of NIDS[J].Microcomputer Applications,2007,28(2):220-224. |
| |
| Authors: | CAI Hongmin WU Naiqi TENG Shaohua |
| |
| Affiliation: | 1 Faculty of Information Technology, Guangzhou University of Traditional Chinese Medicine,GuangZhou, 510006, China ; 2 Faculty of ElectroMechanical Engineering, GuangDong University of Technology, GuangZhou, 510090, China |
| |
| Abstract: | This article introduces the theorys and the methods of the detection of port scanning and OS scanning,and put forward a model of detecting port scanning and OS scanning. It can effectively detects many types of attack of scanning, by capturing the network packets and matching the snort rules. In the end, the article introduced the significance and prospect of the model. |
| |
| Keywords: | IDS |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
