| 摘要: |
| 简要分析NIDS中传统模式匹配方法存在的不足,介绍第三代入侵检测系统中使用的协议分析技术,给出一个在Linux平台下实现该技术的模型。 |
| 关键词: 模式匹配 协议分析 入侵检测 NIDS |
| DOI： |
| 投稿时间：2003-06-10 |
| 基金项目:广西科技攻关项目(桂科攻033008-9)资助 |
|
| Application of Protocol Analysis Technology in NIDS |
|
Ge Zhihui, Li Taoshen
|
| (Coll. of Comp. & Info. Engi., Guangxi Univ., Nanning, 530004) |
| Abstract: |
| The flaw of traditional pattern matching used in NIDS is analyzed.The third Generation Intrusion Detection Technology (Protocol Analysis technology) is discussed.And a implementation model of the technology under Linux platform is also presented. |
| Key words: pattern matching protocol analysis intrusion detection NIDS (Network Intrusion Detection Systems) |
