Internet的使用越来越广泛,随之而来的网络安全已成为人们关注的焦点。入侵检测系统作为一种对付攻击的有效手段,已为越来越多的单位所采用。然而一旦攻击者发现目标网络中部署有入侵检测系统IDS,那么IDS往往成为他们首选的攻击目标。该文详细分析了针对网络IDS的几种攻击类型,即过载攻击、崩溃攻击和欺骗攻击,以及如何防御这些攻击,这对于IDS的设计具有一定的借鉴意义。 The use of Internet is more and more widespread, and the ensuing network security has become the focus of attention. Intrusion detection system as an effective means to deal with attacks, has been used by more and more units. However, IDS often becomes their preferred target of attack once an attacker finds out that IDS is deployed in the target network. This paper analyzes in detail the types of attacks against network IDS, that is, overload attacks, crash attacks and spoofing attacks, and how to defend against these attacks. This is of some reference to the design of IDS.