计算机应用 ›› 2005, Vol. 25 ›› Issue (01): 147-149.DOI: 10.3724/SP.J.1087.2005.0147

• 信息安全 • 上一篇    下一篇

一种优化入侵检测系统的方案

方杰,许峰,黄皓   

  1. 南京大学计算机科学与技术系
  • 出版日期:2005-01-01 发布日期:2005-01-01

Scheme of optimizing intrusion detection system

FANG Jie, XU Feng, HUANG Hao   

  1. Department of Computer Science and Technology, Nanjing University
  • Online:2005-01-01 Published:2005-01-01

摘要: 基于特征的入侵检测系统是目前的入侵检测技术的主流。文中提出了一种针对每一个网络报文,即时的创建一个单一的特征集合来进行匹配的方案,从而减少了匹配的工作量,提高了系统的效率。

关键词: 入侵检测, 特征, Snort, Bro, 保留端口

Abstract: Rule based intrusion detection system is the mainstream of intrusion detection systems. For every incoming network packet, a scheme of creating a single rule set for pattern match was discussed. This scheme could reduce the work of pattern match, and improve the efficiency of system.

Key words: intrusion detection, rule, Snort, Bro, reserved ports

中图分类号: