Research And Implementation Of Distributed Network Intrusion Detection System

Since network security defense systems including traditional firewall, identity authentication and encryption techniques have flaws and shortcomings themselves, this makes intrusion detection technology a new hotspot in network security area. In contrast with passive defense, intrusion detection can actively and in the real time trace intrusions that cause damages and respond immediately. It is especially useful in defending insider attack and becomes a line of defense behind firewall. The survey shows that with the development and extensive application of Internet, intrusion detection technology has great potentials. But, the current situation is that people lack understanding of intrusion detection and intrusion detection technology is not as mature as firewall. Thus, further research into intrusion detection is important.This paper firstly introduces the current network security situation, concepts concerning intrusion detection, its development history and common intrusion detection model. The intrusion detection systems are classified by data source into host-based...