网络入侵检测系统的局限

网络入侵检测系统从网上获取数据并进行分析,从而检测和识别出系统中的未授权或异常现象.因为是被动接受而且攻击的方式在不断地变化,所以局限是不可避免的,其中主要的局限有:交换网络的局限、网络拓扑的局限、检测方法的局限、协议局限和资源及处理能力的局限等.

The Limitation of Network Intrusion Detection System

Network Intrusion Detection System catches data from network, which can detects and distinguishes the unauthorized or abnormal phenomenon in the system. Because it is passive received and the form of attack is continuous changed, the limitation is inevitable, the main limit is as follows: exchange network limit, network topology limit, detection method limit, agreement limit and resource and manage ability limit etc.