A Method for Detecting Intrusion on Networks in Real-time Based on IP Weight
黄本雄, LU LU, Wei Wei, Huang, Zailu · 高技术通讯：英文版 · 2001
A new rule to detect intrusion based on IP weight, which is also well implemented in the rule base of author's NMS, is presented. Compared with traditional ones, intrusion detecting based on IP weight enhanced analysis to packet content. The method also provides a real-time efficient way to analyze traffic on high-speed network and can help to increase valid usage rates of network resources. Practical implementation as a rule in the rule base of our NMS has verified that the rule can detect not only attacks on network, but also other unusual behaviors.