【摘要】 网络的安全问题日益严重,DoS,DDoS等暴力攻击成为千兆级别高速网络上的主要攻击手段,蠕虫的传播占据了大量的网络带宽.传统的入侵检测系统不能有效地处理大量的网络数据,且无法及时阻断检测到的攻击行为.本文针对以上问题,提出了一种可有效运行在高速网络上的分布式入侵检测与阻断系统.此类系统也称为入侵防御系统IPS(Intrusion Prevention System).更多还原

【Abstract】 Network security is getting more important as the Internet evolves.Attacks like DoS,DDoS have become major attack methods on gigabit networks,not to mention the worms have used up network bandwidth.Traditional IDSes could not handle massive network data efficiently or block detected attacks in time.Focusing on those problems,this paper designed a distributed intrusion detection and blocking system which can run on high-speed networks efficiently,which is also known as IPS(Intrusion Prevention System).更多还原