针对现有入侵监测系统的不足,提出一种结合协议状态分析的网络入侵检测模型,即采用了将协议分析和状态分析结合的技术。它是一种基于网络的,以模式匹配技术、状态分析技术和代理技术相结合的入侵检测模型,充分利用状态分析优势进行入侵检测,达到提高检测的速度、准确度和效果。 Aiming at the deficiency of the existing intrusion detection system, a network intrusion detection model based on protocol state analysis is proposed, that is, the technique of combining protocol analysis and state analysis is adopted. It is a network-based intrusion detection model that combines pattern matching, state analysis and proxy technologies. It takes full advantage of the advantages of state analysis for intrusion detection to improve the speed, accuracy and effectiveness of detection.