The Design Of Intrusion Detection System Based On Pattern Matching And Protocol Analysis

With the rapid development of computer and network, when more and more companies and users surf Internet, more and more people have focused network security. IDSs (Intrusion Detection System) are a new type of safety protection technology after traditional security protection method such as firewall, data crypt, etc. and are widely employed. Because of constant expansion of network scale and constant emergence of new intrusion methods , traditional intrusion detection technology based on pattern matching has not adapted to demand of intrusion detection. But protocol analysis based on altitudinal regularity of network protocol is the third-generation intrusion detection technology after pattern matching and can adapt to new demand of intrusion detection.Firstly, this dissertation analyzes the present situation of network security problems, pointing out that the research and development of intrusion detection system have very important meanings. Then the dissertation presents the concept, technology, classification, and standardization of intrusion detection, etc, and intensively studies pattern matching and protocol analysis and improves the pattern matching classical algorithm, the algorithm of BM. Finally, according to common intrusion detection framework, the dissertation proposes the architecture of intrusion detection system based on pattern matching and protocol analysis, and the system has many advantages such as high efficiency, high accuracy , low consumption of resources, etc.