The Research Of Response Technology On Intrusion Detection System

This article is based on the project "Large-scale Intrusion Detection and Stratagem Pre-alerting Technology (No.2002AA142010)", which is sponsored by the National High Technique Research and Developing Scheme (863). Because the size of internet is expanding constantly, the quantity and frequency that the networks of different types are being attacked increase doubly; the simple firewall tactics have been already unable to meet the requirements for safe and extremely sensitive department. Then intrusion detection system become new focus of safe market, and has already begun to play its key role in all kinds of environments. Compared with this, intrusion respond technology can not deal with automation, distributed and in coordination with attack of type to invade. This paper has carried on deep research in intrusion respond technology. At first, introducing intrusion detection and intrusion respond technology, on the basis of measuring and study the current situation of intrusion detection technology and intrusion responded technology, putting forward and invaded and responded the problem that technology faces and research development trend. This paper proposed that one kind of intrusion detection system and responds models on the basis of network that intelligence acts as agent. It regards acting as agent in intelligence as the foundation, can be mutual wirelessly with the administrator, invade the fast response ability to behavior of invading of detection system after raising the network.