基于威胁排序的分流结构IPS研究与设计*

研究了在高速网络环境下的入侵防御系统设计与实现。分流系统本身缺乏有效的检测方法，不能对数据流量进行深层次的分析，所以其漏检率较高，应用范围有限。提出了一种用于分流系统的威胁排序方法，运用层次分析法对数据包的威胁程度进行排序，有效地解决了分流系统的漏检问题，并实现了一个完整的分流入侵防御系统的各模块设计，对其效能进行了初步评估。

Research of shunt IPS based on threat ranking

Inline traffic analysis for intrusion prevention become more difficult as the high speed data rates of modern networks. Jose implemented a prototype shunt hardware design, and this model was valuable for improving the efficiency of intrusion detection, Based on this model, this paper proposed a new shunt model connecting with intrusion prevention system by the theory of threat ranking,and put forward the design of every part,then evaluated the system for a rudimentary work.