基于校园网协作式入侵检测系统模型研究

该文通过对现有校园网络安全及入侵检测技术的分析，提出一种基于协议分析的分布式入侵检测方法，采用分布收集信息，分布处理多方协作的方式，将基于主机的IDS和基于网络的IDS结合使用，构筑面向大型网络的IDS；然后通过全局安全网络协作，收集拨号用户的信息，检查个体计算机是否存在漏洞、病毒，如果发现有就阻止其接入网络，强制其用到可信的网络修复系统或更新最新的病毒库后才可以正常接入校园网。这样通过网络和个体来确保整个校园网络的安全运行。

The Cooperative Intrusion Detection System Model Based on Campus Network

Through the existing analysis of network security and intrusion detection technology, this paper puts forward a cooperative intrusion detection method. This new method collects information distributedly, processes in multilateral cooperation, and constructs the large-network IDS. Then, it collects the information from dialing users to detect whether there are vulnerabilities and vims in individual or not. By means of such functions, this method only permits the users with reliable network repairing system or with the updated latest virus library to access to the campus network. Only this can assure the safe operation of the whole campus network via the net and individuals.