Research And Implement Of Network-Based Intrusion Detetion System

With the rapid development of the Internet and the related technologies, the intrusion technology based on network has been prevailed. Though a variety of traditional static security defending system, such as firewall, identification and data encryption are well worked, they can't construct a defending architecture. So there comes the Intrusion Detection System, a type of dynamic net security system. It has been another defending line behind firewall, which can find the intrusion from the trace and orderliness of their actions.The Intrusion Detection System has been made much progress after two decades' development in either theory and or application, the greatest achievement is the Common Intrusion Detection Frame, which has built a foundation for the further evolution of Distributed Intrusion Detection System. In this paper, we firstly analyze the current situation in network security, presenting the defects of traditional network security technology and then introduces the Intrusion Detection System. In the following sections, we introduce the history of the Intrusion Detection System, and some common detection technologies and varieties of detection systems. On the basis of all above, in the third section of this paper, we thoroughly discuss the theory of Network-based Intrusion Detection System.Finally, the author sums up this paper and put forward the next.