An Intrusion Detection Model Based on Protocol Analysis
Jinwen Luo · Computer Technology and Development · 2008
To intrusion detection system,it makes improving efficiency of intrusion detection by choosing better method of intrusion detection,traditional intrusion detection system because of large amount of calculation,the high rate of omissions and misstatements has not already adapted to the needs of the current network system.Protocol analysis is a kind of key technology for network intrusion detection.The paper which based on that idea will introduce content,process of protocol analysis,extraction of intrusion feature and application in intrusion detection,mainly implement IP packet analysis,and point out a feasible intrusion detection model which connect with pattern matching algorithm.Compared with other model,the model has obvious advantage by analysing.