入侵检测技术的分析与研究  

The Analysis and Atudy of Intrusion Detection Technology

作　　者：肖竞华[1] 胡华[1] 

机构地区：[1]武汉科技大学计算机科学与技术学院,湖北武汉430081

出　　处：《计算机安全》2009年第8期30-32,共3页Network & Computer Security

摘　　要：入侵检测是动态安全技术中最核心的技术之一,近年来已成为网络安全领域的研究热点。首先介绍了入侵检测技术的概念,依据不同标准对入侵检测技术进行了系统的分类,详细阐述并比较了各种入侵检测方法。在分析这些技术的基础上设计了一种基于专家系统的入侵检测系统结构体系。最后,总结了当前入侵检测技术面临的主要问题,分析了它的发展方向。Intrusion detection is one of core technologies in dynamic safe technique and it has become a research hotspot in network security in recent years. This paper first introduces the concept of intrusion detection and systematically classifies intrusion detection technology according to different standards, expounds and compares the various intrusion detection methods in detail. Then based on the analysis of these technologies,we designs an intrusion detection system architecture based on expert system. Finally,the main problems with the present intrusion detection technology are discussed,and its future trends are predicted.

关 键 词：入侵检测 入侵检测系统 误用检测 异常检测 发展方向 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311.13[自动化与计算机技术—计算机科学与技术]