改进BM算法策略的网络入侵检测系统设计  

Event-based Defense Strategy Designed to Network Intrusion Detection System

作　　者：丁国强[1] 赵国增[1] 李传锋[1] 

机构地区：[1]洛阳理工学院计算机与信息工程系,河南洛阳471023

出　　处：《计算机测量与控制》2011年第11期2661-2664,共4页Computer Measurement &Control

基　　金：河南省教育厅自然科学基金项目(2010510016)

摘　　要：入侵检测系统是近几年来网络安全领域的热门技术;传统的网络入侵检测对复杂数据信息和外来攻击都不能进行有效的特征识别,从而导致网络入侵检测准确率较低;因此,为确保网络的安全,结合实际应用过程,将事件防御策略思想引入到网络入侵检测设计中,首先,对网络安全框架和分布式网络检测系统进行了分析,在此基础上对网络检测系统进行改进,最后,利用改进BM算法策略对网络入侵系统进行有效地检测,以满足网络入侵检测实时性的要求;实验表明,该方法的性能优于静态分类器选择的检测方法,提高了检测精确性和安全性,为网络安全的运行提供了可靠的保证。Intrusion detection system is a hot field network which security technology in recent years,. Traditional network intrusion detection data of complex information and external attacks are not effective feature recognition, resulting in a lower accuracy rate network intru sion detection. So. To ensure network security, combined with practical application process, will introduce the idea of the event defense strategy to the design of network intrusion detection, first of all, the network security framework and a distributed network detection system is analyzed, on the basis of this detection system to improve the network Finally, the improved BM algorithm strategies for effective network intrusion detection system to meet the network intrusionDetect real--time requirements. Experiments show that the design method is superi- or to the static classifier selection tests to improve detection and security preparations for the operation of network security to provide a reliable guarantee.

关 键 词：入侵检测系统 模式匹配 网络安全 事件防御策略 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]