摘要： 阐述了入侵检测系统(IDS)的概念、模型,目前的通信协议状况,重点介绍了入侵检测报文交换格式( IDMEF)。IDMEF描述 了表示IDS输出信息的数据模型,并且已经用XML(Extensible Markup Language)语言实现了该数据模型,还发展了XML文档类型定义DTDs(Document Type Definition),最后给出了一个例子。
关键词:
入侵检测系统,
入侵检测报文交换格式,
数据模型,
XML,
文档类型定义
Abstract: This article elucidates the concept, model and communication protocols of IDS(intrusion detection systems), particularly discusses IDMEF(Intrusion Detection Message Exchange Format),an Internet-draft of IETF. This Internet-draft describes a data model to represent information exported by IDS, an implementation of the data model in the Extensible Markup Language (XML), an XML document type definition and several examples. ;;;;
中图分类号:
高峻,吕述望. 入侵检测系统(IDS)及其通信协议[J]. , 2002, 28(06): 140-142.
GAO Jin, LU Shuwang. Intrusion Detection System and Its Communication Protocol[J]. , 2002, 28(06): 140-142.