Apparatus and method for simplifying packet intrusion detection rule, and apparatus and method for detecting a intrusion packet using the simplified detection rule

摘要

The packet intrusion detection apparatus and method for simplifying the rules and intrusion detection apparatus and method are disclosed. Rearranged by at least one intrusion detection check the conditions of rule checking item, rule group consisting of a connection structure of test conditions that satisfy the test items and order of the rules, intrusion detection , and then groups the same test conditions in the same test item generate, in the connection structure of the group rule and generates a common rule consisting of checking the condition that the test start position . And , performing the packet based on a common rule, and intrusion detection , intrusion detection is performed based on the packet group rule . Thus , intrusion using simplified and grouped packet intrusion detection rules can reduce the hatching of the detection process .