基于层次化的入侵检测模型研究

摘要

With the wide use of the Internet, rapid growth of network information, network security has become increasingly prominent, intrusion detection has become important components of network security. For traditional of intrusion detection model by exists of known system vulnerability or attack method of knowledge defects, this paper analyses the current intrusion detection system by exists of many problem, presents based on intrusion detection policy of level of intrusion detection model, the model can monitor known intrusion and detection unknown intrusion, design of network intrusion detection system has reference value, an integrated solution network security problem is a useful exploration.%随着互联网络的广泛应用,网络信息量迅速增长,网络安全问题日趋突出,入侵检测已经成为网络安全的重要组成部分.针对传统的入侵检测模型所存在的已知系统漏洞或攻击方法的知识缺陷,分析了当前入侵检测系统所存在的诸多问题,提出了基于入侵检测策略的层次化入侵检测模型,该模型可以监视已知入侵和检测未知入侵,对网络入侵检测系统的设计有一定参考价值,对综合解决网络安全问题是一个有益的探索.