一种基于攻击特征描述的网络入侵检测模型  

A network intrusion detection method based on description of attack characteristics

作　　者：刘庆俞[1] 叶震[1] 尹才荣[1] 

机构地区：[1]合肥工业大学计算机与信息学院,安徽合肥230009

出　　处：《合肥工业大学学报（自然科学版）》2010年第2期238-241,共4页Journal of Hefei University of Technology：Natural Science

摘　　要：文章在对网络入侵检测技术进行分析的基础上,结合网络攻击特征的描述方法和分布式系统的特点,提出一种新的网络入侵检测的模型。攻击特征描述是提取攻击的本质属性,分布式系统则很好地利用了集群的优势。对于高速网络的出现,如何减少丢包并提高入侵检测的效率成为一个重要的研究课题。该文提出的分层检测方法,充分考虑了攻击特征分类描述方法,实验证明可以提高网络入侵检测准确率。By taking the methods of describing the features .of network attacks and the features of dis-tributed, systems into consideration, this paper proposes a new network intrusion model based on the analysis of intrusion detection systems. Description Of the features of network attacks is to extract the essential ,attribute of network attacks and the distributed system makes good use of the superiority of clustering, It is of great significance to study how to reduce the losing of packets and irhprove the efi-ciency of intrusion detection in accordance with the appearing of high speed networks The proposed model of intrusion detection system takes full account of the ways of describing the features of net-work attacks according to their categories, and the experiments show that this model can improve the aceuraey of network intrusion detection systems.

关 键 词：网络入侵检测 攻击特征 负载均衡 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]