通过物理层实现响应的入侵检测系统模型  

Modified intrusion detection model with physical layer response

作　　者：白耀辉[1] 陈明[1] 

机构地区：[1]西北工业大学自动化学院,陕西西安710072

出　　处：《计算机工程与设计》2005年第11期3106-3108,共3页Computer Engineering and Design

摘　　要：研究了入侵检测响应中的延迟问题。通常,在入侵行为的检测和对入侵行为的响应之间有一个时间延迟,这个延迟时间范围可能是从几分钟到几个月,从而为入侵者提供了更多的机会。根据Cohen的研究,这种响应时间上的延迟常常带来严重的后果。作为这个问题的一种解决方法,提出了一种修改的入侵检测模型,这种模型包括了物理层的响应机理,从而能快速有效地对入侵做出响应,同时也给出了物理层设计的方案。The delay problem of intrusion detection response was studied. Usually, there is a delay between detection of a possible intrusion and response to that intrusion. This delay in detection and response, ranging from minutes to months, provides a window of opportunity for attackers to exploit, According to Cohen＇s research, it often induces to serious result. As one solution to this problem, a modified IDS model was proposed that includes physical layer response mechanism, so as to respond rapidly and effectively. Furthermore, the details of the physical layer design was given,

关 键 词：入侵检测 物理层 响应 PCI总线 PCI9052 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]