摘要
本文在分析误用检测和异常检测的基础上,提出了自适应混合入侵检测系统,基于网络的误用检测模块用于检测已知特征的入侵行为,而基于主机的异常模块用于发现新型入侵攻击。
This paper analyzes the misuse detection and the anomaly detection, presents a self-adaptive and composite intrusion detection system, misuse detection model based on nets is used to detect intrusion of known feature, and anomaly detection based on computer is used to find new intrusion.
基金
零陵学院青年课题资助
