The Design And Development Of Network Intrusion Detection System Based On Winpcap

Intrusion Detection is extremely beneficial to the supplement of the firewalls.IntrusionDetection System (IDS) can examine the attack before it causes anydestruction, and also use the alert and protection system to get rid of the intrusion. Inthis process, the loss caused by intrusion can be reduced. After the intrusion, relatedinformation can be collected for later use as the protection system knowledge. Thisknowledge can be kept in knowledge library so that this kind of intrusion will nomore happen. However, the increasing expansion of the network scale and theincreasing renewal of the intrusion method require Intrusion Detection System withhigher quality.Based on the research of IDS developing status and direction at home andabroad，the author discusses the status of the networking security、Network intrusionmethods and measures, the importance of network security and introduced a networkintrusion detection system definition, function and component modules. Just becausethere are many Intrusion Detection systems which have been developed on the Linux,such as Snort, the author puts forward the idea that pattern matching IDS, developedby Winpcap library on Windows platform. The author compared several patternmatching algorithms, at last using the ACBM algorithm to develop the software, thatmakes our system have a high performance.