首页> 外国专利> Intrusion detection method using adaptive rule estimation in network-based instrusion detection system

Intrusion detection method using adaptive rule estimation in network-based instrusion detection system

机译:基于网络的入侵检测系统中基于自适应规则估计的入侵检测方法

摘要

An intrusion detection method by adaptive rule estimation in a network-based intrusion detection system (NDS) is disclosed. The method includes collecting a packet on a network and searching for an original rule most similar to the collected packet from a rule database in which a rule for intrusion detection is stored, and judging whether a hacker intrudes by estimating a changed position of the collected packet from the original rule. Accordingly, it is possible to prevent an indirect attack of a hacker using a packet whose number of bits is changed due to deletion/insertion of characters from/into the packet.
机译:公开了一种基于自适应规则估计的基于网络的入侵检测系统(NDS)中的入侵检测方法。该方法包括:在网络上收集分组;从存储入侵检测规则的规则数据库中搜索与收集的分组最相似的原始规则;以及通过估计收集的分组的变化位置来判断黑客是否入侵。从原来的规则。相应地,可以防止使用由于其字符的删除/插入而改变了比特数的分组的黑客的间接攻击。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号