CAJ | 학술논문

文章在对网络入侵检测技术进行分析的基础上,结合网络攻击特征的描述方法和分布式系统的特点,提出一种新的网络入侵检测的模型.攻击特征描述是提取攻击的本质属性,分布式系统则很好地利用了集群的优势.对于高速网络的出现,如何减少丢包并提高入侵检测的效率成为一个重要的研究课题.该文提出的分层检测方法,充分考虑了攻击特征分类描述方法,实验证明可以提高网络入侵检测准确率.
문장재대망락입침검측기술진행분석적기출상,결합망락공격특정적묘술방법화분포식계통적특점,제출일충신적망락입침검측적모형.공격특정묘술시제취공격적본질속성,분포식계통칙흔호지이용료집군적우세.대우고속망락적출현,여하감소주포병제고입침검측적효솔성위일개중요적연구과제.해문제출적분층검측방법,충분고필료공격특정분류묘술방법,실험증명가이제고망락입침검측준학솔.
By taking the methods of describing the features of network attacks and the features of dis-tributed systems into consideration,this paper proposes a new network intrusion model based on the analysis of intrusion detection systems.Description of the features of network attacks is to extract the essential attribute of network attacks and the distributed system makes good use of the superiority of clustering.It is of great significance to study how to reduce the losing of packets and improve the effi-ciency of intrusion detection in accordance with the appearing of high speed networks.The proposed model of intrusion detection system takes full account of the ways of describing the features of net-work attacks according to their categories,and the experiments show that this model can improve the accuracy of network intrusion detection systems.