节点文献
高效串匹配型入侵检测系统
An Efficient Content-based Intrusion Detection System
【摘要】 针对当前串匹配型入侵检测系统普遍面临的效率问题,从规则库结构、串匹配算法及应用层协议分析等方面入手进行优化,设计并实现了高效率的串匹配型入侵检测系统SpeedIDs,并将测试结果与Snon系统进行了对比。
【Abstract】 The efficiency of content-based intrusion detection systems, the structure of the signature library, the string matching algorithms and the analysis of application level protocols, has been regarded as the most crucial topic for extensive research. This paper introduces SpeedlDS, an efficient experimental content-based IDS. After an overview on several important aspects of design and implementation in which SpeedlDS distinguishes itself from other IDSs are particularly discussed. Experiments are also presented to test the effectiveness and results are proved promising by excelling Snort, a famous and widely used IDS.
【Key words】 Intrusion detection; String matching; Signature library; Protocol analysis;
- 【文献出处】 计算机工程 ,Computer Engineering , 编辑部邮箱 ,2003年19期
- 【分类号】TP393.08
- 【被引频次】22
- 【下载频次】144