%0 Journal Article
%T A Scanning Detection Algorithm Based on Finite Machine of Protocol Status
基于协议状态有限机的系统扫描检测算法
%A DENG Yi-Gui
%A WANG Kang
%A QIU Quan-Jie
%A
邓一贵
%A 王康
%A 邱全杰
%J 计算机科学
%D 2007
%I
%X In order to resolve the problem that current scanning detection algorithms can not recognize hidden scanning and slow scanning,a scanning detection algorithm based on finite machine of protocol status is proposed.It can more exactly detect common scanning,and has effect on hidden scanning and slow scanning which current scanning detection algorithms can not recognize.Experiment indicates that the algorithm can augment the performance of scanning detec- tion,decline the rate of misinformation and alarming times.
%K Intrusion detection
%K System scanning detection
%K Finite machine of protocol status
入侵检测
%K 系统扫描检测
%K 协议状态有限机
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=64A12D73428C8B8DBFB978D04DFEB3C1&aid=91D5CDD19BAA5F5B&yid=A732AF04DDA03BB3&vid=339D79302DF62549&iid=F3090AE9B60B7ED1&sid=2B5DE8A23DCEED39&eid=AE09EACBCD1B2A13&journal_id=1002-137X&journal_name=计算机科学&referenced_num=0&reference_num=5