【作者】 廖桂平； 喻飞； 沈岳； 张林峰； 徐成；

【Author】 Liao Guiping 1,Yu Fei1,2,3,Shen Yue 1,Zhang Linfeng1,Xu Cheng2,3 1.School of Computer & Information Engineering,Hunan Agricultural University,Changsha 410128,P.R.China2.Jiangsu Provincial Key Laboratory of Computer Information Processing Technology,Suzhou University,Suzhou 2150063,P.R.China3.Guangdong Province Key Lab of Electronic Commerce Market Application Technology,Guangdong University of Business Studies,Guangzhou510320,P.R.China

【机构】 湖南农业大学信息科学与技术学院； 苏州大学江苏省计算机信息处理技术重点实验室； 广东省电子商务市场应用技术重点实验室；

【摘要】 入侵检测系统的评估和开发都需要一个仿真网络环境,一个功能完整的入侵检测系统评估环境不需大的改动就可以直接用做入侵检测系统的测试。介绍入侵检测评估的相关工作,讨论对入侵检测系统进行评估时的主要评价指标,提出一个入侵检测系统的评估系统,对评估环境中的网络流量仿真、主机使用仿真和网络攻击仿真等几个关键技术问题进行了深入研究。更多还原

【Abstract】 With the deeply research on intrusion detection techniques and the widely use of intrusion detection products,the study of evaluation techniques of intrusion detection systems became important.In the paper,relative works of the evaluation of intrusion detection systems was introduced.The primary aspects of intrusion detection systems in an evaluation were discussed.An evaluation system for intrusion detection systems was proposed.In the system,a supervisor module controls the whole system.The supervisor module schedules the traffic control module and the attack emulation module.The data in the evaluation environment are recorded and input to the evaluation module.The functions such as emulation of network traffic and host usage,emulation of attacks and evaluation report generation are implemented.更多还原