基于入侵预防的网络入侵检测技术的研究  

Study on Network Intrusion Detection Technology Based on Intrusion Prevention

作　　者：马艳春[1] 肖创柏[2] 

机构地区：[1]华北科技学院,北京东燕郊101601 [2]北京工业大学,北京100022

出　　处：《华北科技学院学报》2007年第2期87-90,共4页Journal of North China Institute of Science and Technology

摘　　要：通过分析当前典型的基于特征的入侵检测系统的技术实现,阐述了入侵预防系统的实现要点,基于入侵预防结构的研究提出了一个通用的入侵预防系统,对入侵预防系统的实现原理作了初步探讨。As the network continues to expand, the invasion and means of attack are more sophisticated and covert. Due to the inherent shortcomings of traditional intrusion detection system, it has been unable to adapt to the current network environment. Especially in the large-scale high-speed network environment, facing the attack of different characteristics, it shows inadequa- cies. Meanwhile, the intrusion detection system, as a basic framework of intrusion prevention system, has become the focus of researches made by domestic and foreign scholars. This article focuses on research on the structure of intrusion prevention system. In this article, the author puts forward a generic intrusion prevention system through in-depth analysis of current and typical intrusion detection system technology based on characteristics. The author also explains the points of Intrusion Prevention System＇s accomplishment and makes a preliminary discussion on the principle of intrusion prevention system＇s accomplishment.

关 键 词：INTRUSION DETECTION INTRUSION PREVENTION 网络安全 NIDS 蠕虫病毒 

分 类 号：TN915[电子电信—通信与信息系统]