Review on the development and future trend of the intrusion detection system (IDS)

摘要

Invasion of attack technology and detection technology in a certain extent, is promote each other, in order to accurately and effectively detect known and unknown attacks, with superior algorithm in intrusion detection system and technology, mainly is the artificial intelligence technology, mobile agent technology, data fusion associated with information technology. The research is undertaken on the analysis of the existing technology, on the basis of review of research, the development trend of intrusion detection system (IDS development lay the foundation for subsequent theory. The author want to analysis technology including, but not limited to the following several aspects: (1) the information fusion technology. Fusion is the process of different sensors, low level of the relativity of warning according to certain algorithm into a higher level of warning information, which will help to solve the problem of false positives and omission. The fusion process is a huge, huge noise detection information detection and extraction of target process; (2) the evolution mechanism of the simulation. Through the analysis of existing bionic algorithm that is the immune algorithm, tabu search algorithm, artificial fish algorithm and its application in Intrusion Detection Systems; (3) the mobile agent technology. Detection method based on agent is very powerful, it allows the intrusion detection system based on agent to provide a combination of anomaly detection and misuse detection ability.