Research Of The Network Intrusion Detection System Based On The Hierarchical Knowledgebase

Intrusion detection in network security is identifying and responding for the hostile behavior to computer system resource and network resource. Intrusion detection system in network security is a new network security technology in recent years, which also is an important network security tool. It can real-time detect for system and network resource, and find attacker of system and computer network. It also can prevent legal user from wrong operation.The traditional intrusion detection system has problems such as the low realtime on it's detection pattern and the high time complexity in the pttern match, it's performance is not very good.On the analyse of the the pattern and the basic principle of the intrusion detection system,studies the knowledge and the knowledge base,focuses on the presentation of the attack knowledge,and puts forward to the model of the NIDS base on the pattern match and the hierarchical library, which is based on the object-oriented knowledge,then sets up a model of the knowledge presentation,the history rules and methods are also put inside it,according to the characteristic of the rules that are shown many times will be shown in a short time, designed the hierarchical library of the NIDSPMHL in order to detect the intrusion as quick as possible.Using the KMP algorithm to do the pattern match,it can lower the time of the pattern search and to bring up the system performance.