Intrusion Detection

Author: Luo Shoushan
Publisher:
Publish Date: 2004-04-01
Features: Intrusion detection, as an important technology in the field of network and information security, is a crucial component of the entire security protection system. As a security product, the role of an intrusion detection system (IDS) is to detect and identify intrusions and attacks within networks and systems, and to respond effectively to these attacks, such as preventing them, recording them, and taking proactive responses. With the increasing number of attacks on systems and networks, research on intrusion detection systems has become more extensive and in-depth. Intrusion detection, as an important technology in the field of network and information security, is a vital part of the overall security protection system. As an undergraduate textbook for information security majors, this book introduces the theory and application of intrusion detection. The content includes: an introduction to network security models and technologies; an overview of intrusion detection systems, including the history of intrusion detection and an introduction to the basic modules of IDSs; an introduction to hacker techniques, including descriptions of basic attacks and an introduction to trojan horse technologies; an introduction to the working principles and methods of intrusion detection, including intrusion detection models based on data mining technology, intrusion detection models based on data fusion technology, the architecture of a distributed collaborative intrusion detection system that is intrusion-tolerant, and the design of a distributed intrusion detection system architecture for enterprise networks; an introduction to typical intrusion detection systems; and the future development directions of intrusion detection.