漫谈如何正确使用网络入侵检测系统（Discussion on how to use network intrusion detection system correctly）.docVIP

漫谈如何正确使用网络入侵检测系统（Discussion on how to use network intrusion detection system correctly） How to correctly use the network intrusion detection system Release date: August 26, 2008 Audo look6.0 Download With the network security risk factor is increasing continuously, once as the main safety means firewall, has been unable to meet the demand of the network security. As a supplement to the firewall, IDS (Intrusion Detection System) can help quickly identify network attacks, expand security managerial ability of system manager (including security audit, monitoring, attack recognition and response), and increase the integrity of the information security infrastructure. IDS is considered to be the second security gate after firewall, it can monitor the network in case of not affecting the network performance, so as to provide real-time protection to internal and external attacks and misuse. With the rapid development of computer network technology and the Internet, network attacks and intrusions grow with each passing day, especially in the past two years, government departments, military institutions, financial institutions, the enterprise computer network from hackers. The attacker can easily attack and intrusion of those without safety protection network, such as the denial of service attack, engaged in unauthorized access, wanton theft and tampering of data information and monitoring procedures to install the back door ready access to information, communication within the computer virus, destroy the host etc.. Attacks and intrusions brought huge economic losses and damage to the image of these institutions and enterprises, and even a direct threat to national security. First, existing problems Why can the attacker attacks and intrusion on the network? The reason is that our computer network exists can be used by the attackers security vulnerabilities, vulnerabilities and security configuration, mainly in the operating system, network services, TCP/IP protocol, applicat