网络在带给人们便利的同时,其自身的脆弱性为恶意攻击者提供了入侵机会,入侵攻击手段的日益复杂化和多样化对入侵检测性能提出更高要求。本文在研究现有入侵检测技术的基础上,对比分析了各种入侵检测方法的优劣,提出了一种入侵检测系统体系结构。 While bringing people convenience, the vulnerability of the network provides a chance for malicious attackers to attack. The increasing complexity and diversification of intrusion attacks put forward higher requirements on intrusion detection performance. Based on the study of the existing intrusion detection technology, this paper comparatively analyzes the advantages and disadvantages of various intrusion detection methods, and proposes an intrusion detection system architecture.