伴随着网络的应用普及,网络安全问题也不断表现出来。在防火墙、认证技术等传统安防技术日趋成熟的同时,作为主动防御技术之一的入侵检测技术为网络安全提供了新的有力的支持。在如前检测识别过程中引入基于知识的、有自学习能力的案例推理机制,能够为网络管理者提供可靠的、有针对性的入侵响应处理方法。 With the popularization of the application of the network, the problem of network security is constantly showing up. While traditional security technologies such as firewalls and authentication technologies are maturing, intrusion detection technology, one of the active defense technologies, provides new and powerful support for network security. The introduction of knowledge-based and self-learning case-based reasoning mechanism in the former detection and recognition process can provide network administrators with reliable and targeted intrusion response processing methods.