摘要： 分析当前网络入侵检测系统NIDS的主要思想和实现方法，针对传统NIDS的不足，提出了一种基于特征检测的分布式网络报警系统模型，并且详细地描述了该模型的结构和实现。该模型将规则匹配与案例分析以及集中控制与分布检测相结合，在保证网络安全的基础上，有效地提高了NIDS的动态性和自适应性。
关键词:
特征检测,
G-BoR,
L-BoC,
状态推理
Abstract: The paper analyzes the primary idea and implementing technique of current network intrusion detection system(NIDS). It aims at the shortage of traditional NIDS, and advances a kind of model of distributed network alert system based on signature detection and describes the structure and achievement of the model in detail. Based on the guarantee of network security, the model advances NIDS in performance of dynamic and self-adaption, through combining rules matching with cases analyzing, and centralized control with distributed detection.
中图分类号:
杨静,刘春. 基于特征检测的分布式网络报警系统[J]. , 2003, 29(02): 203-205.
YANG Jing, LIU Chun. Distributed Network Alert System Based on Signature Detection[J]. , 2003, 29(02): 203-205.