| With the development of network technology and the expansion of application, the operation of information is depend on the network more and more. The information facility has become an important support of national economy. As the important constitution of information facility, information security is related to the existence of country, the development of economy, the stability of society. Now the computer network security has become an international problem. Every year the economic cost resulted from the destruction of computer network security system comes up to several billion dollars. And with the diversity and complexity of network attack tools and methods, the need of network security can't be meet only by the traditional methods. The recent issues of network hacker also support this point. Intrusion Detection System is a new net security technology.This dissertation introdues the kinds of fire wall and its function in detail based on the information security technology. Then the dissertation introduces another network security technology-intrusion detection technology. After the introduction of the concept of IDS, the security technology usually used by IDS-matching pattern is analyzed. The dissertation introdues the advantages of matching pattern technology, introduce the most advanced intrusion detection technology-protocol analysis technology by pointing out the defects of the matching pattern technology. After the analysis of network IDS model, the main modules of protocol analysis-based IDS are elaborated and the methods of realization are given in chapter four.The protocol analysis-based IDS is an advanced IDS, which finds the existence of unsafe factor in the net quickly using the high regularity of net protocol. Compared with the traditional matching pattern technology, the protocol analysis-based IDS has the advantages such as: high speed of detection, low system cost, low error rate, detection of chip attack and so on.
|
PDF Full Text Request