在SSH协议下的入侵检测  

Intrusion Detection in SSH

作　　者：丁晓峰[1] 李周贤 刘炳华[1] 顾巍[1] 吴楠宁[1] 

机构地区：[1]北京文献服务处,北京100036 [2]总参警卫局管理处,北京100017

出　　处：《现代图书情报技术》2006年第4期60-62,共3页New Technology of Library and Information Service

摘　　要：阐述SSH协议下入侵检测系统存在的问题,论述SSH协议下入侵检测的必要性和需要注意的两个问题,提出一种新的入侵检测方法。Widespread using the SSH protocol can greatly reduces the risk of remote computer access by encrypting the transmission of data. At the same time, because of the encrypted data, intrusion detection system based clear data can＇t identify the encrypted attack information. This paper outlines the role of SSH and types of intrusion detection, then proposes techniques for an intrusion detection under SSH protocol.

关 键 词：SSH协议 入侵检测系统 特征检测 异常检测 IDXP协议 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]