Research And Implementation Of Personal Intrusion Detection System

The Intrusion Detection technology is a new security technology, apart from traditional security protecting technology, such as firewall and data encryption. It monitors the computer or network and reacts to the vicious intrusion or suspicious activities. It not only protects the security of network,but also the personal computer (PC).First,this paper discusses the cause of the network security problem and the function of all kinds of security technolgies.Then it analyzes the threat that the PC user face.The author indicates that in order to protect the PC's security from diffreent aspects , Intrusion Detection System should be used besides using the personal firewall.This paper debates the use of intrusion detection technology in PC's security and indicates how to realize the model of Personal Intrusion Detect System (PIDS). Considering the trait of PC,PIDS uses VxD technology to finish the data collection quickly and combines the protocol analysis and pattern tree matching to implement the efficient ,exact analytical method.lt also offers the simple,understandable interface and detailed log.After finishing the programming,the author tests the capability and function of the modules of PIDS and gives some typical attacking examples to test the applied function of PIDS.PIDS is similar with personal firewall,it applies to PC and protects the PC's security. PIDS can work together with personal firewall and they constitute a dynamic security system that can protect PC more effectively.