Research and Implementation of Detecting Complex Attract Using Protocol Analysis
Shenghui Liu · Harbin Ligong Daxue xuebao · 2006
Aiming at solving the flaw of simply pattern matching used in traditional NIDS,this paper recommends the application of protocol analysis technology used in NIDS.According to the pattern of protocol-attacks and protocol state information,it brings forward a new method that unites protocol analysis and state transition,and illustrates how it is applied in detecting Denial of Service(DoS) attacks.