The Research of NTI Technology Applied in NIDS
Xiaoyan Liu · Harbin Ligong Daxue xuebao · 2008
In view of how to bring down rate of false negatives and positives problems in traditional Network Intrusion Detection System(NIDS),this article proceeds with deficiency NIDS knowing locating network environment too few and lacking pertinence,using Java to design a Net Topology Information(NTI) gaining system based on web,and constitutes a NTI analyzer;Using method that the flag information(Banner) recognizes service software and to cognize network topology,and creates NTI database.Then NTI analyzer and database are applied in NIDS Snort,and separately tested on different OS' and service software.Finally,the test proves that it improved warning efficiency and accuracy contrasting.