入侵检测系统用于检测对计算机系统和网络的攻击。作为一种新型的信息系统安全机制,通过监控这些信息系统的使用情况,来检测信息系统的用户越权使用以及系统外部的入侵者利用系统的安全缺陷对系统进行入侵的企图。本文首先分析了入侵检测系统的主要模型及其实现技术,然后,对网络环境下基于代理机制的入侵检测模型及其主要实现技术进行了讨论。 Intrusion Detection System Used to detect attacks on computer systems and networks. As a new type of information system security mechanism, we monitor the use of these information systems to detect unauthorized use of information systems and attempt to invade the system by intruders using system security flaws. This paper first analyzes the main model of intrusion detection system and its implementation technology, and then discusses the intrusion detection model based on the agent mechanism and its main implementation technologies in the network environment.