A Scanning Detection Algorithm Based on Finite Machine of Protocol Status
基于协议状态有限机的系统扫描检测算法

In order to resolve the problem that current scanning detection algorithms can not recognize hidden scanning and slow scanning,a scanning detection algorithm based on finite machine of protocol status is proposed.It can more exactly detect common scanning,and has effect on hidden scanning and slow scanning which current scanning detection algorithms can not recognize.Experiment indicates that the algorithm can augment the performance of scanning detec- tion,decline the rate of misinformation and alarming times.