Design And Study Of The Distributed Intrusion Detection System In Teaching Network

With the rapid development of computer network, people’s work, study and life are inseparable, and we enjoy it bring us convenient.but at the same time, network attack and the invasion has becoming more and more serious, such as a great loss increase has been caused around the world, has aroused great concern on all countries. Network security technology research was also imminent and in depth development.This article first introduces the network computer threats and attacks, the traditional security technologies, such as firewall, intrusion detection technology are analyzed, and pointed out the deficiency existing in them, they still can’t very well solve the problem of the current network security. Analysis of Teaching network, it not only suffer from illegal invasion, poor information on the Internet and virus threats, but also suffer from internal threats.Additionally, in order to ensure the normal operation of Teaching network, introduces a new network security technology, intrusion detection technology, in its detailed research and analysis, we found that this technology can effectively solve the traditional single point of failure focused on technology with intrusion detection, performance bottlenecks and other issues.Then, in-depth study of these technologies on the basis of the specific combination of Shangqiu Polytechnic University Teaching network environment, The topology of distributed intrusion detection system is given, and its overall design scheme is introduced, through the sniffer and Snort focus on the realization of the joint function of its defense. At the same time, the invasion on the basis of BMH and AC-BM matching algorithm, and a more superior to the string search algorithm, which take full advantage of every match in order to compare the information to skip many characters in the next comparison.Finally, the improved matching algorithm and the invasion of the defense system function test, and experimental results are analyzed and discussed. From the experimental results, The construction of the system not only can effectively improve the level of the Teaching network security protection. but also offer a solution to the problem of network security for other types of network.