Chengdu Tobacco Information Network Intrusion Detection System

With the fast development of network technology, the accident of network intrusion increase more and more. Intrusion Detection after firewalls is another important security technology in the network security defense system, which is capable of real-time inspecting and controlling system in the overall process of system invades. Network Intrusion Detection system can inspect not only the extravagant use of resources inside of the network, but also different kinds of security problems such as intrusions from outside to inside of the network. the overwhelmingly increasing scale of the network and updating means of intrusion have poised a higher demand for technologies of Intrusion Detection .the key problem facing the Intrusion Detection technologies is the challenges of real-time in Intrusion Detection and the performance of operation upon data posed by the increasing network traffic. Therefore, how to improve detection efficiency of Intrusion Detection system and reduce false and miss probability is the key research on Intrusion Detection technologies.Our key research based on MySQL of Linux, build inspecting and controlling model of network traffic and systems tools according to the characteristics of DDOS, network scan and worms, to fulfill monitoring and statistical analysis of the network traffic according to appointed address space and time section, and monitor and warn abnormal occurrence to achieve monitoring and defending attack towards DDOS.