Research of Analysis and Detection of Scanning Attack of NIDS
Shaohua Teng · Microcomputer applications · 2007
This article introduces the theorys and the methods of the detection of port scanning and OS scanning,and put forward a model of detecting port scanning and OS scanning.It can effectively detects many types of attack of scanning,by capturing the network packets and matching the snort rules.In the end,the article introduced the significance and prospect of the model.