Intrusion detection process is such a process as based on connection requests accepted by the computer, searching and matching the intrusion in abnormity request sets of the existing intrusion detection system. The system develops multiple Agent parallel detection models which can judge comprehensively whether there is an invasion behavior based on Agent results. The intrusion detection system first obtains the abnormal connection request through the network interface, and then classifies abnormities and extracts their features, further handles them through calling abnormity corresponding handler, so as to protect the system.
展开▼
