Abstract: This paper proposes a linkage system design about Web intrusion detection and antagoniz ation based on boundary router. And exhaustively introduces key technique and arithmetic that are used in this system. Including the catching data bag based on zero times copying thinking, the state machine matching technique and the arithmetic about dynamic changing alarm valve of checking net abnormity. This paper proposes the system designing plan under a large flow Web circumstance.

摘要： 给出一个基于边界路由器的网络入侵检测、网络异常检测及对抗联动系统的设计方案，详细介绍了应用于该系统的关键技术及算法，包括基于零拷贝思想的捕包技术、状态机匹配技术以及网络异常检测报警阈值的动态调节算法；同时给出了在大流量网络环境下，该系统的改进设计方案。

关键词: 入侵特征, 旁路监听, 阈值向量, 模式匹配, 访问列表

CLC Number: 

• TP393.08