Computer Network Security, Intrusion Detection System Research And Design

With the development of computer net work, net work security become more important for the aim of protects net information from variety kind of attack. Because of the variety of net connection, asymmetry of terminal distribution, system interconnection and net work opening, net work is easy to be attacked by hackers or baleful software. Net security now becomes the main obstacle for net work development. With the development of net work security technology, intrusion detection technology needs to be study thoroughly.Intrusion detection system is a key part of net work security architecture. It is an active security technology and is necessary complementarities for fire wall. The basic idea of Intrusion detection system is to collect information from net work or computer system, and monitor the activity of host or net user, detect the intrusions which against net work security strategy. Intrusion detection system is divided into two types as host based and net based according to the data source.This paper discusses the study progeny and development trend first. Then introduce the ideas of integration, cooperation and selectivity into Intrusion detection system. The paper suggests a new Intrusion detection system based on various detection technologies and constructs theory architecture. Integrating technologies such as distributed intrusion detection, intrusion detection via characteristic engine, intrusion detection via mobile agent, intrusion detection via immunity theory, intrusion detection via data mining, intrusion detection via clustering and sequence analyses, the new Intrusion detection system optimize the system by data analyses and algorithm matching based on the constructed knowledge base of intrusion activity. The new system is robust, adaptive and easy to be extended. It is proved to ensure the net work security.