Survey on Intrusion Detection Techniques
入侵检测研究综述

Intrusion detection, as one of the most active and important network security technology, can compensate the shortcomings of traditional security protection measure. Through building dynamic security cycle, it can promote the protection capacity of system and reduce the security threats as great as possible. An overview of basic issues on intrusion detection is shown in this paper, which is involved with three main aspects of intrusion detection, including Intrusion Detection System (IDS) architecture, intrusion detection methods and IDS evaluation. Firstly, three kinds of IDS architectures are analyzed. Then, current intrusion detection models are given, and their merits or shortcomings are discussed in detail. Finally, some future promising directions are presented.