论文部分内容阅读
入侵检测与防御系统是计算机网络安全的一个重要技术手段,然而随着高速网络技术快速发展,入侵检测和防御系统面临着严峻的挑战。本文设计并实现了基于计算机网络的入侵防御原型系统,在实现入侵检测功能的同时,能够在TCP/IP协议栈内直接阻止非法的数据包,有效地提高了防御系统的效率。同时,文中在网络入侵检测与防御系统数据收集过程中,引入了统计学的抽样技术,为入侵检测提供了可靠的数据源,有效地减少系统开销。
Intrusion detection and defense system is an important technical means of computer network security. However, with the rapid development of high-speed network technology, intrusion detection and prevention systems are facing severe challenges. This paper designs and realizes the intrusion prevention prototype system based on computer network. While implementing the intrusion detection function, it can directly block illegal data packets in the TCP / IP protocol stack and effectively improve the efficiency of the defense system. At the same time, in the process of network intrusion detection and defense system data collection, the statistical sampling technique is introduced, which provides a reliable data source for intrusion detection and effectively reduces the system overhead.