| 具有认知能力的入侵检测系统模型 |
| |
| 引用本文： | 潘志松,陈松灿,段永柱.具有认知能力的入侵检测系统模型[J].南京航空航天大学学报,2003,35(2):220-224. |
| |
| 作者姓名： | 潘志松 陈松灿 段永柱 |
| |
| 作者单位： | 南京航空航天大学信息科学与技术学院,南京,210016 |
| |
| 摘 要： | 介绍了入侵检测的原理，对目前入侵检测的模型和方法进行分析，并给出了一个具有认知能力的入侵检测系统模型，该模型由基于规则的检测模块、神经网络组件、统计分析处理模块三个主要模块组成。模型采用了异常检测和误用检测相结合的方法，使系统既有对已知的攻击有较好的识别能力，又有检测未知攻击的能力。文末指出了当前入侵检测存在的问题及今后的发展方向。
|
| 关 键 词： | 认知能力 入侵检测系统 系统模型 网络安全 |
| 文章编号： | 1005-2615(2003)02-0220-05 |
| 修稿时间： | 2002年4月3日 |
A Model of Intrusion Detection System with Apperception Ability |
| |
| Pan Zhisong,Chen Songcan,Duan Yongzhu College of Information Science and Technology,Nanjing University of Aeronautics & Astronautics,Nanjing,China.A Model of Intrusion Detection System with Apperception Ability[J].Journal of Nanjing University of Aeronautics & Astronautics,2003,35(2):220-224. |
| |
| Authors: | Pan Zhisong Chen Songcan Duan Yongzhu College of Information Science and Technology Nanjing University of Aeronautics & Astronautics Nanjing China |
| |
| Institution: | Pan Zhisong,Chen Songcan,Duan Yongzhu College of Information Science and Technology,Nanjing University of Aeronautics & Astronautics,Nanjing,210016,China |
| |
| Abstract: | Intrusion detection is an effective approach for dealing with the problems of network security. In this paper, firstly the necessity and the concept of intrusion detection are presented, and its models and techniques are described and analyzed. Then,a model of intrusion detection system with apperception ability is proposed. The model consists of three parts: rule based module, neural network module, and statistic analysis module. By combining misuse detection and anomaly detection, the system has good performance of identifying known attacks and detecting unknown attacks. Finally, the existing problem and the development trend of intrusion detection technology is concluded. |
| |
| Keywords: | network security intrusion detection neural network |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
