基于动态映射的入侵检测系统研究  

Research of an Intrusion Detection System (IDS) Based on Active Mapping

作　　者：刘明川[1] 彭长生[1] 

机构地区：[1]重庆邮电大学成人教育学院,重庆400065

出　　处：《西南农业大学学报（社会科学版）》2008年第2期124-127,共4页Journal of Southwest Agricultural University:Social Science Edition

摘　　要：针对现存的入侵检测系统逃避技术的特点,提出了一种新的动态映射系统模型来解决网络拓扑结构的复杂性、TCP/IP栈策略的多变性、网络入侵检测系统造成的模糊性问题,提高了网络入侵检测系统的检测能力。In this paper, the authors, taking into consideration the technology of evade IDS, present a lightweight solution, an Active Mapping, which eliminates TCP/IP-based ambiguity in a NIDS analysis with minimal runtime cost. The key idea is to acquire sufficient knowledge about the intranet being monitored that, using it, the NIDS can tell which of those packets will arrive at their purported host.

关 键 词：入侵检测系统 反入侵检测技术 动态映射 网络入侵检测系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]