基于网络协议解析的入侵检测系统的研究  

The Research of an Intrusion Detection System Building and Algorithm Based on Protocol Analysis

作　　者：张华[1] 

机构地区：[1]湖南财政经济学院,湖南长沙410205

出　　处：《计算机安全》2010年第6期46-48,共3页Network & Computer Security

摘　　要：传统的基于模式匹配的入侵监测系统没有充分利用网络协议的规则,存在计算量大、准确率低等缺点。在网络协议分析的基础上,提出了基于网络协议解析的新的入侵检测系统模型。该系统能大大减少数据运算匹配量,为基于协议解析的入侵检测方法提供了一个更加广阔的发展平台。The traditional intrusion detection system uses simple pattern matching or pattern matching method for improvement of intrusion detection.Because there are some problems of it such as high strength computations,low detection rates and so on.In contrast to traditional intrusion detection system model,a new intrusion detection model is built and designed.Theoretically,the system can greatly reduce the amount of data matching operations and provides a more extensive development platform for intrusion detection methods based on protocol analysis.

关 键 词：入侵检测 协议解析 模式匹配 算法设计 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]