【摘要】 文章设计并实现了一个入侵检测系统———SC-IDS,该系统采用滥用和异常相结合的检测方法,分布式的体系结构,符合P2DR模型。克服了传统系统的缺点,如误警率和漏警率高、可扩展性弱、不能适应大规模网络、不能与其它安全产品协同工作等。在实际应用中取得了良好效果。更多还原

【Abstract】 This paper establishes and accomplishes the intrusion detection system,SC-IDS.It combines the knowledge-based IDS and anomaly-based IDS into a system,it accords with P2DR model and the distributed framework.It surmounts the shortcoming of traditional ways of detection,for example,high false positive and false negative rate;can’t adapt large-scale network;can’t cooperate with other security product etc.It gains a good effect after operation.更多还原