| 基于协议分析的入侵检测技术研究 |
| |
| 引用本文： | 杨小平,苏静.基于协议分析的入侵检测技术研究[J].计算机应用研究,2004,21(2):108-110. |
| |
| 作者姓名： | 杨小平 苏静 |
| |
| 作者单位： | 1. 中国人民大学,信息学院,北京,100872
2. 中国长城计算机信息网,北京,100036 |
| |
| 摘 要： | 提出基于协议分析和命令解析的模式匹配入侵检测方法，根据各种协议的结构特点准确捕获入侵特征。实际测试表明，该方法大大提高了入侵检测系统性能，降低了漏报率和误报率。
|
| 关 键 词： | 入侵检测 协议分析 IDS |
| 文章编号： | 1001-3695(2004)02-0108-03 |
| 修稿时间： | 2003年1月22日 |
Research of Intrusion Detection Technology Based on Protocol Analysis |
| |
| YANG Xiao-ping,SU Jing.Research of Intrusion Detection Technology Based on Protocol Analysis[J].Application Research of Computers,2004,21(2):108-110. |
| |
| Authors: | YANG Xiao-ping SU Jing |
| |
| Affiliation: | YANG Xiao-ping~1,SU Jing~2 |
| |
| Abstract: | In this article we present a new Intrusion Detection Method using protocol analysis and command parsing technology to accurately capture the character of intrusions based on the characteristic of protocol architecture.According to our test results,the technology greatly improves the performance of IDS and reduces the misapprehensive and transudatory rates. |
| |
| Keywords: | Intrusion Detection System Protocol Analysis IDS |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
