Research and Implementation of Intrusion Detection System Merged Scanner Technique
|更新时间:2026-07-10
|
Research and Implementation of Intrusion Detection System Merged Scanner Technique
Vol. 14, Issue 1, Pages: 55-59(2009)
作者机构:
哈尔滨理工大学计算机科学与技术学院
作者简介:
基金信息:
DOI:
CLC:TP393.08
Published:2009
稿件说明:
移动端阅览
QIAO Pei-li, SONG Ping. Research and Implementation of Intrusion Detection System Merged Scanner Technique[J]. 2009, 14(1): 55-59.
DOI:
QIAO Pei-li, SONG Ping. Research and Implementation of Intrusion Detection System Merged Scanner Technique[J]. 2009, 14(1): 55-59.DOI:
Research and Implementation of Intrusion Detection System Merged Scanner Technique
摘要
入侵检测(IDS)技术虽然已经经过了二十多年的发展
但总体上它的技术还不是很成熟
还有很多问题尚未得到很好的解决
例如:高误报率、漏报率以及检测速率低下已是目前IDS发展的瓶颈.本文针对这两个问题提出一种解决方案
即将扫描技术运用到IDS中来.充分利用扫描的结果
对IDS的规则库进行精简
提高匹配速率;对IDS发出的警报进行验证
降低漏报率和误报率.
Abstract
Although the intrusion detection technique has been developed about twenty years
the technique in the whole is not mature
and there are many problems now that do not have the best solutions
such as: the high rate of false positives and negatives and the low efficiency of detection have been the bottleneck of development of IDS.This work proposes a new solution scheme for the problems
that is
applying the scanning technique to IDS.It dynamically compacts the rules bases of IDS and validates the alarms of IDS...