入侵檢測(cè)是一種重要的安全防范技術(shù)，在網(wǎng)絡(luò)系統(tǒng)中得到了廣泛應(yīng)用。但是隨著
Internet 的快速發(fā)展，傳統(tǒng)的入侵檢測(cè)技術(shù)已不能滿足網(wǎng)絡(luò)安全的發(fā)展需求。本文設(shè)計(jì)并實(shí)現(xiàn)了一個(gè)基于P2DR 安全模型及雙檢測(cè)點(diǎn)的入侵檢測(cè)系統(tǒng)，該系統(tǒng)具有自適應(yīng)動(dòng)態(tài)防護(hù)和縱深防御特性。理論分析及實(shí)驗(yàn)結(jié)果表明，該系統(tǒng)可以提高網(wǎng)絡(luò)系統(tǒng)的安全性。
關(guān)鍵字：網(wǎng)絡(luò)安全；入侵檢測(cè)系統(tǒng)；訪問(wèn)控制；雙檢測(cè)點(diǎn)
Design and Implementation of Two-detection-point Intrusion Detection System
Tan Xin-Lian XU Jiang-Feng (School of Information and Engineering, Zhengzhou University, Zhengzhou, 450001) Abstract: As one of the information security technology, intrusion detection technique has been used to network system widely. But with the spread of Internet, traditional intrusion detection technique can’t meet the increasingly growing network security’s requirement. This paper established and accomplished the intrusion detection system based on P2DR model and two-detection-point, it had the characteristic of active defense and deep defense. Theoretical analysis and experimental results demonstrate that the system can improve the security of network system.
Key words: network safety；IDS; Access control; Two-detection-point