【摘要】 复合攻击的检测是近年来IDS着力解决的一个重要问题。研究表明,解决这个问题的根本途径在于建立有效的模型积累、识别多报文间的上下文关系,从而进一步对入侵的意图进行精确判断。本文跟踪了近年来意图识别领域的技术发展,详细介绍了几种有代表性方法的核心思想,分析它们适用的范围和存在的问题,比较了各自的优劣所在,最后总结了这个领域的难点问题和发展趋势。更多还原

【Abstract】 The detection of composed intrusion is an active topic for IDS now.The past researches have shown that in- trusion plan recognition technology is critical to reduce false or missed alert rate,tries to construct an effective model to accumulate the relationship among alerts in different context and promotes recognition accuracy.This paper summarizes the advantage and the shortcoming of the known intrusion plan recognition methods.The special requirements are dis- cussed and the most promising development is proposed.更多还原