摘要： 面对大量网络攻击事件,自动入侵响应系统能够在入侵发生后主动采取措施阻击入侵的延续和降低系统的损失,保护受害系统。该文给出了自动入侵响应的结构和简单分类,分析了基于自适应技术、移动代理技术、IDIP协议和主动网络的自动入侵响应系统的技术和方法,指出了自动入侵响应系统目前存在的问题和今后的研究方向。

关键词: 入侵响应, 自适应, 移动代理, IDIP, 主动网络

Abstract: With a large amount of network attacks, the intrusion response systems can actively protect the compromised systems and minimize the loss of the system after the intrusion happened. This paper presents an automated intrusion response model and its simple categories, then analyzes the automated intrusion response techniques that are based on self-adaptation, mobile agent techniques, IDIP and active networks, and finally discusses the existing problems and future research direction in this field.

中图分类号: 

• TP393.08