Intrusion detection system based on protocol analying state machine
Gang Cai · Journal of Chongqing University of Posts and Telecommunications · 2005
Protocol analyzing finite state machine plays a very important role in guaranteeing the correctness of protocol analyzing. Protocol analyzing finite state machine is a new concept in intrusion detection system.In this paper,the authors try to apply protocol analyzing finite state machine to routing intrusion detection system.Authors show the formal models for protocol specifications: finite state machine and communicating finite state machine. And the authors also review the work on intrusion detection system based on protocol analyzing finite state machine on these models,analyse the problems and also show the implementation of intrusion detection system based on protocol analyzing finite state machine. And the authors also introduce, a protocol analyzing finite state machine architecture and analyse the experimental results of the intrusion detection system based on protocol analyzing finite state machine.