本文详细阐述了入侵检测系统的基本原理和功能模块,从数据源、检测方法和检测定时三个方面描述了入侵检测系统的分类,并对目前国内外入侵检测技术的研究现状,包括误用检测、异常检测、其它检测技术、以及商业化的入侵检测产品,作了详细的介绍和分析。 This paper describes the basic principles and functional modules of intrusion detection system in detail. It describes the classification of intrusion detection system from three aspects: data source, detection method and detection timing. The current research status of intrusion detection technology at home and abroad, including misuse detection , Anomaly detection, other detection techniques, and commercial intrusion detection products, made a detailed introduction and analysis.