摘要： 随着Internet的高速发展，网络安全问题越来越引人注目。在层出不穷的黑客技术中，内部攻击始终占据着很大的成分；与此同时，现有的防火墙技术不能满足人们对网络安全的要求，因此所谓的入侵检测系统越来越多地引起了人们的重视。文章介绍了一种异常检测方法和一种滥用检测方法，并根据所描述的方法构造了一个入侵检测系统，实验证明，该系统可以检测到已知的大部分的入侵行为。

关键词: 网络安全, 入侵检测系统, 异常检测, 滥用检测

Abstract: With the rapid development of Internet, network security is more and more important, and the skills used by hackers to intrude systems are getting more and more mature. Among all the attacking techniques,those attacks inside Intranet take a large proportion, and the firewalls nowadays can't satisfy demands for network security, so more and more studies have been focused on intrusion detection systems. This paper analyzes the theories named misuse detection and abnormal detection, and based on it, constructs a detection system called IDS, which has been proved to be able to detect most of the existing intrusions.

中图分类号: 

• TP393.08