Research On Network Intrusion Detection System Based On TCP/IP

Along with the development of the Internet and technology of network,realizing information share, changing people's life, and advancingdevelopment of society. But, because of the opening network, networkprotocols do not integral, and hole of operation and application software, thesecurity of information have been suffered heavily breach. The question ofcomputer network security becoming focus of people's attention. Researchingnetwork security is the important facet in the field of computer research. Itincluding many kinds of technology, intrusion detection is one of networksecurity technology. Intrusion detection comes latter than traditional networktechnology, but they have some new characteristics. Studying and usingintrusion detection technology to safeguard resources in computer network,offer new thinking for development of network security, and upgradeperformance of network security.This dissertation expatiates the develop history and actuality of networksecurity and intrusion detection. This dissertation particular expatiates thetheory and technology of intrusion detection. And on base of these theory andtechnology, designing based TCP/IP network intrusion detection system. Thisdissertation adopts pattern matching and protocol analysis technology.Realizing the function of each subsystem, and experimentalize for designingfunctions.This dissertation improves on arithmetic of pattern matching. Afterreferencing study data aboard and national, bring forward new mechanism:cooperation of intrusion detection and firewall.