IDS with distributed database system

摘要

By supervising TCP/IP packet which flows on a network over a long period, saving its log to a distributed database, and analyzing the log, this system detects slow scan (port scan with long delay), which is difficult for the conventional IDS to detect.