The design and research based on the intrusion detection model of packet filtering technology
Li Cuizhi, Hui Zhang, Wu Li Ping · 2011
This paper presents an efficient intrusion detection model for packet processing. Packet capture device detect the network data packets directly after capture them, instead of detecting them after restructuring, thus the efficiency of detection can be improved. Current products of intrusion detection use the packet restructuring mechanism in order to reduce the false negative rate of the system. The model process the packet restructuring mechanism combined with the data packets. This model improve the efficiency of detection system on the basis of ensuring the detection to the integrity of the attacks.