Teaching Network-based Distributed Intrusion Detection System Design And Realization

With the computer network used broadly in lives, the problems caused by the network security are more and more prevalent. The computer suffers from the negative effect of the invasion attack, Dos (Denial of Serviec)and network resource misuse, et.. So the study for the technique of network security becomes more and more important, even it has been the key problem for the further development of varian network service and application.This thesis firstly introduces the current network security status and dominating defending approaches for network security, and emphasizes the importance of researching and developing the intrusion detection systems. Then, the concept, classification and popular intrusion detection techniques are introduced respectively. This thesis proposed one kind may effective guard against yellow website, the fast examination, based on teaching distributional invasion examination model design . And the thesis design the probe technology of DIDS in Linux including the intrusion technology and system design, too. It concludes the following modules: network packet capture module, network protocol, analysis module, rules analysis module,etc. After all, the paper expatiates on some classical matching algorithms, and analyses their applying ranges, advantages and disadvantages. On the base of this, a faster string searching algorkhm(New-Search) is put forward. This algorithm makes full use of the information of every matching comparison to skip more characters beforethe next comparison. This algorithm enormous enhancement match speed and gets the anticipated effect...