摘要： 利用数据库的主动功能,实现网络层和分析层的接口,提高了网络入侵检测系统(IDS)的分析处理性能,使其达到近实时检测;对主动数据库系统(aDBS)功能结构进行了介绍,并将其应用到IDS中,建立了两层入侵检测体系结构,最后分析并列举了IDS中的数据库应具有的主动功能。

关键词: 入侵检测系统, 主动数据库系统, ECA规则

Abstract: To utilize the active function of database, it achieves an interface between the network layer and analysis layer, and improves the processing capability of IDS to near real-time intrusion detection. The paper describes the structure of active database systems functions, applies it in IDS, establishes two layers intrusion detection architecture, and some active functions are analyzed and enumerated at the end.

中图分类号: 

• TP311.13