摘要： 提出了一种基于主动网络的入侵检测系统框架ANIDS,它结合了基于主机的和基于网络的入侵检测系统的思想,具有灵活性好、可扩展性强以及高效率等优点。同时,由于主动网络的可编程特性,ANIDS还是一个集入侵检测、网络管理、网络监控三位一体的系统。

关键词: 入侵检测系统, 主动网络, CIDF, 网络安全

Abstract: An intrusion detection architecture based on active network-ANIDS is presented to establish a distributed IDS. It combines host-based IDS with network-based IDS, which improves flexibility,efficiency and expansibility. Due to the programmable character of active network, ANIDS provides network management and network control ability as well as intrusion detection.

中图分类号: 

• TP393