基于模式匹配的Windows主机入侵检测系统研究

入侵检测技术是防火墙、加密技术、身份认证等安全机制、安全策略之后发展起来的新的安全保障技术,它可以识别针对网络资源的恶意行为和攻击,并作出响应。本文提出了一种基于模式匹配的入侵检测系统,该系统利用 VxD 技术、TCP/IP 协议分析和模式匹配的分析算法实现了高效、准确的数据分析和处理,从而为用户构筑了一个动态的安全防护体系。

Research into windows computer intrusion detection system based on pattern matching

The Intrusion Detection technology is a new security technology,apart from security protecting technology,such as firewall,data encryption and identity certification.It monitors the computer or network and reacts to the suspicious activities or vicious intrusion.This paper puts forward a kind of Intrusion Detection system based on pattern matching and this system uses VxD technology,TCP/IP protocol analysis and pattern matching to implement the effficient,exact data analysis and processing,thus constituting a dynamic security system that can protect pc more effectively.