| With the prevailing development of computer network, human being's life is greatly facilitated, and the sharing information has been widely promoted. However, due to the neglect of the safety aspect concerning network proxy as well as the out-of-order of using and managing network, the safety of network has been sharply menaced. With the exposure of much more shortcomings in traditional firework, researchers start to turn their eyes towards the research and development of intrusion detection system.This thesis is mainly about the development, classification and standardization of intrusion detection system. Also I present an intrusion detection system based anomaly and misuse detection. After twenty more years' evolution, misuse detection technology is used in intrusion detection system more maturely. In another aspect, however, because of its own shortage, anomaly detection technology is rarely used in the leading commercial intrusion detection system. This thesis penetrates into anomaly detection for further study and uses the latest research fruit of artificial anomaly as importiint reference. As for the most important modules in this system, this thesis also presents needed analysis and formation for parse module, misuse detection module and anomaly detection module. |
