摘要： 分布式入侵检测与响应系统模型是安全防火墙系统的一个重要补充，是一个实时的网络违规识别和响应系统。该文简述了当前常见的安全技术和安全思想，并提出了基于直接从数据链路层获取信息的网络监听思想，并依此思想对相关核心技术作了一定程度的研究。

关键词: 分布式, 入侵检测, 响应, 模式匹配

Abstract: The model of distributed intrusion detection and response system is an important implementation of security fire-wall system. It is a distinguished regularity and response system. Current security technology and theory are described in the paper, and the method of getting message from data-link layer is provided. Based on this method, the relevant sore technology is investigated.

中图分类号: 

• TP393.08