入侵检测系统 入侵是指任何试图破坏计算机和网络 安全性（包括信息的完整性、机密 性）的行为。通过实时检测、识别并响应这种入侵行为来保护信息系统安全的系统被称之谓网络安全入侵检测系统。 总体上说，入侵检测技术可以分为异常检测Ａｎｏｍａｌｙ Ｄｅｌｅｃｔｉｏｎ）和 Intrusion Detection System Intrusion refers to any attempt to undermine the computer and network security (including the integrity of the information, confidentiality) behavior. A system that protects the security of an information system by detecting, recognizing, and responding to such intrusion in real time is called a network security intrusion detection system. In general, intrusion detection technology can be divided into anomaly detection Anomaly Delection) and