摘要： 在分布式计算环境中，信息系统首先需要考虑的就是保护数据和资源免遭未授权的非法访问、操作，甚至恶意入侵和破坏，因此安全管理日益成为人们关注的焦点。在诸多的新兴技术中，IDS（入侵检测系统）以它新颖的思路和广阔的应用前景而倍受青睐。介绍IDS的历史和现状，说明现有IDS的不足以及今后ID技术的发展趋势。

关键词: 入侵检测系统, 误用检测, 异常检测, 事件响应和恢复

Abstract: Resources and data need be protected by a mechanism which prevents system from unauthorized accesses, misuses and malicious intrusions in today's distributed computing environment. SSOs (System Security Officer) demands an intelligent system to support them to care about these issues. Thus, a challenging but fascinating technology, IDS had been deeply investigated during last 20 years and is gaining more and more attention recently. IDS can identify intrusions and misuses and then trigger corresponding response and recovery processing. In this thesis, author first reviews the history and status quo of IDS, then discusses the future trends in the development of IDS' Technologies.

中图分类号: 

• TP393.08