入侵检测系统是对“防火墙”、“数据加密”等安全系统的有效补充。它能够帮助网络系统快速发现黑客攻击,并且扩展了系统管理员的安全管理能力,提高了信息安全基础结构的完整性。文中分析了入侵检测系统的原理,设计了基于windows平台下的入侵检测系统,并对snort的检测算法进行了改进,同时对系统进行了测试,验证了实验结果。 Intrusion detection system is the “firewall”, “data encryption” and other security systems, an effective complement. It helps network systems quickly detect hacker attacks and expands the system administrator’s security management capabilities to improve the integrity of the information security infrastructure. In this paper, the principle of intrusion detection system is analyzed, the intrusion detection system based on windows platform is designed, and the detection algorithm of snort is improved. At the same time, the system is tested to verify the experimental results.