分布式入侵检测技术的研究  

Study of Distributed Intrusion Detection System

作　　者：王纲[1] 曲俊华[1] 

机构地区：[1]华北电力大学(北京)计算机科学与技术系,北京102206

出　　处：《现代电力》2002年第3期71-77,共7页Modern Electric Power

摘　　要：介绍了分布式入侵检测系统的基本组成 ,各组成部分的功能和入侵检测的方法。分布式入侵检测系统在对攻击事件检测和报警时采用分散 -集中方式 ,所采用的数据结构——目标树 ,被用来进行入侵预测。文中使用了 IP Spoofing攻击来描述入侵检测的全过程。最后总结了分布式入侵检测系统所要着重考虑的几个问题。The basic concept, the components and the way of detecting intrusions of the DIDS are introduced. The means of distributed and centralized detecting in finding out the nasty incursions are used. The key data structure-goal tree-is adopted for the DIDS's pattern matching and intrusion predicting is provided too.A scenario in which the IP Spoofing is detected by the coordination of the components of DIDS is provided to make the theories clear.Some related works are still necessary to be considered while using the DIDS are mentioned.

关 键 词：分布式入侵检测系统 目标树 控制器 网络安全 防火墙 计算机网络 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]