Analysis of Implementing of IDS Based on NDIS in Windows
基于NDIS构造Windows下入侵检测系统技术分析

An implementing method of IDS Based on NDIS is stated in this article, and the differences between methods which based on NDIS and that based on WinPcap are discussed. By comparison, the approach based on NDIS is more flexible and has higher performance than WinPcap. We have implemented a model system to prove our opinion.