基于信息安全的入侵检测技术研究  

The Research about Intrusion Detection Technique of Information Safety

作　　者：刘子都[1] 

机构地区：[1]华中科技大学文华学院,湖北武汉430074

出　　处：《电脑与电信》2006年第12期28-30,共3页Computer & Telecommunication

摘　　要：入侵检测技术可以提供对内部攻击、外部攻击和误操作的实时检测和响应,是网络信息动态安全核心技术之一。它实际上是一种信息识别与检测技术,而从以数据为中心的观点看,入侵检测本身就是一个数据分析过程。本文首先介绍了入侵检测的理论基础和领域,讨论了入侵检测的分类和方法。然后对主机入侵检测的方法进行了总结。Host based intrusion detection technology is an active research area in the field of network information security, which can provide real - time detection and reaction for both inside and outside attacks, as well as mis -operation. Host based intrusion detection technology has become the core of dynamic network security technology, intrusion detection is a technology of information discrimination and detection, and from the data - driven point, also a process of data analysis. In this paper, it briefly introduces the structural design and theoretic base of HIDS, summarizes the algorithms in this area, and analyzes the information of API sequence, including disposal and analysis.

关 键 词：主机入侵检测系统 信息安全 研究 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]