Network Intrusion Detection Products To The Technical Specification

The wide use of network intrusion-detection systems (NIDS) requires efficient test and evaluation technique to assess the quality of these systems. The efficient test and evaluation is not only beneficial to the improvement of product quality for manufactures, but also helpful to the choice of appropriate devices for users. A technical specification for NIDS is a key factor for successful system development and system selection. Therefore, the efficient test and evaluation of NIDS should be based on the technical specification.Since there are few technical standards for NIDS, it's necessary and urgent to set up a set of technical specifications of NIDS. This thesis concentrates on the study of technical specifications of NIDS. We investigate the market requirements of NIDS and test more than ten devices of NIDS. Based on the above works, we propose technical specifications to regulate the functionality, performance as well as physical interface of NIDS in a network having limited bandwidth to 100M Hz. The specification proposed in this thesis is the first one of the kind domestically. The application of the specification to NIDS test shows that it enhances the completeness of the functionality test and is more effective than the existing evaluation methodologies.