Rule Base Design of Ipv6 Network Intrusion Detection System

摘要

In order to improve the IPv4/IPv6 network intrusion detection system efficiency, the rules of intrusion detection system, feature library has been designed, gives a detailed list of rules and regulations define the structure, the rule base using three-dimensional linked list data structure, rules and their options are stored in the list, the scan to find the list to find the first match with the rules of data packets, in the case of matching, pattern matching, or search using a test plug to match. The design can improve the alarm system, intrusion detection accuracy, and efficiency.