入侵檢測是一種重要的安全防范技術，在網絡系統中得到了廣泛應用。但是隨著
Internet 的快速發展，傳統的入侵檢測技術已不能滿足網絡安全的發展需求。本文設計并實現了一個基于P2DR 安全模型及雙檢測點的入侵檢測系統，該系統具有自適應動態防護和縱深防御特性。理論分析及實驗結果表明，該系統可以提高網絡系統的安全性。
關鍵字：網絡安全；入侵檢測系統；訪問控制；雙檢測點
Design and Implementation of Two-detection-point Intrusion Detection System
Tan Xin-Lian XU Jiang-Feng (School of Information and Engineering, Zhengzhou University, Zhengzhou, 450001) Abstract: As one of the information security technology, intrusion detection technique has been used to network system widely. But with the spread of Internet, traditional intrusion detection technique can’t meet the increasingly growing network security’s requirement. This paper established and accomplished the intrusion detection system based on P2DR model and two-detection-point, it had the characteristic of active defense and deep defense. Theoretical analysis and experimental results demonstrate that the system can improve the security of network system.
Key words: network safety；IDS; Access control; Two-detection-point