为了满足准确有效的入侵检测和对安全网络处理作出反应的需要,我们提出了集中访问控制和入侵检测模型。我们的方法基于特定的安全策略扩展识别应用级入侵和可疑行为的能力,引导审计数据搜集,入侵检测和反应。这个系统通过比较访问请求模式和安全策略来检测入侵和对其作出反应,为了建立一致的攻击画面不同的检测者相互通信。 In order to meet the need of accurate and effective intrusion detection and response to secure network processing, we propose a centralized access control and intrusion detection model. Our approach extends the ability to identify application-level intrusions and suspicious behavior based on specific security policies to guide audit data collection, intrusion detection, and response. This system detects intrusions and responds to them by comparing access request patterns and security policies, and in order to establish a consistent attack picture, different testers communicate with each other.