基于网络协议解析的入侵检测系统的研究

传统的基于模式匹配的入侵监测系统没有充分利用网络协议的规则,存在计算量大、准确率低等缺点。在网络协议分析的基础上,提出了基于网络协议解析的新的入侵检测系统模型。该系统能大大减少数据运算匹配量,为基于协议解析的入侵检测方法提供了一个更加广阔的发展平台。

The Research of an Intrusion Detection System Building and Algorithm Based on Protocol Analysis

The traditional intrusion detection system uses simple pattern matching or pattern matching method for improvement of intrusion detection.Because there are some problems of it such as high strength computations,low detection rates and so on.In contrast to traditional intrusion detection system model,a new intrusion detection model is built and designed.Theoretically,the system can greatly reduce the amount of data matching operations and provides a more extensive development platform for intrusion detection methods based on protocol analysis.