Intrusion Detection System Based On The Modified Bmh Algorithm

Intrusion Detection (ID)technology is that one kind protects oneself from a kind of network safe practice attacked voluntarily, Continue the security technology of new generation after the traditional safe protective measure , such as" fire wall"," the data are encrypted",etc.. As rational supplement of fire wall, invade detection technique can help the system to deal with attack of network , Expand security managerial ability of system manager( including auditting and monitor, attack and discern and respond safely), Raise the integrality of the safe infrastructure of the information.Whether propose kinds of invasion detection system not based on part this text,have good distribution performance of and can expanding.It combine the network-based IDS and host-based EDS into a system, and provide detection, report and respone together.In the implement of the network engine, the combination of network protocol analyze and pattern match technology is used, and reduce scope to search. We also improved pattern match algorithm, the network engine can search intrusion signal more quickly. We use network interface detection in host agent, which will enable the IDS work on switch network fine.