The Intrusion Detection System Based on the Protocol State Analysis
Xie Feng-zh · Sci-Tech Information Development & Economy · 2007
This paper proposes an approach for the intrusion detection based on protocol state analysis, which not only makes full use of the protocol state information, but also considers the content state of the adjacent contextual packets, and constructs the state sequence of the protocol to detect the intrusion through the state transformation, fulfils the analysis effectively on the protocols at various layers of the network, enhances the completeness, accuracy and efficiency of the detection. The experimental results demonstrate that this approach is feasible.