Network Intrusion Detection Principles and Technology

Author: Hu Changzhen
Publisher:
Publish Date: 2006-01-01
Features: This book is dedicated to proposing theories and methods to improve the detection rate of network intrusion detection and reduce false alarm rates, and applying them to the design of network intrusion detection systems. The book elaborates in detail on the principles and technologies of network intrusion detection and system design. After briefly introducing the significance, methods, existing technologies, and issues of network intrusion detection, it provides a detailed discussion on various techniques, principles, and methods, including anomaly detection based on critical hosts, uncertain knowledge representation and reasoning for abuse detection, network collaborative attack detection based on ontologies, abuse detection systems based on active knowledge bases, machine learning for network intrusion detection, and distributed intrusion detection with information fusion. Finally, it analyzes the development and trends of network intrusion detection technology. This book is a technical monograph reflecting the latest research achievements in network intrusion detection technology, with content derived from the research results of multiple doctoral dissertations. It serves as a reference for technical personnel and researchers engaged in information security technology, as well as a textbook for graduate students in information security technology and related disciplines.