DOUBLE-LAYER INTRUSION DETECTION METHOD BASED ON NDIS-HOOK AND SPI

摘要：

Traditional intrusion detection systems, either in application layer or in kernel layer, have faults in capture and analysis for network data packets. After analyzing and comparing the capture mechanisms of windows operating system for network data packet, we design a double-layer intrusion detection model based on the NIDS-HOOK and SPI, and implement its key techniques. The experimental results show that the performance of the double-layer intrusion detection model is superior to the traditional intrusion detection model.

关键词： SPI (Service Provider Interface) Network Driver Interface Specification (NDIS) Intrusion Detection System (IDS)

作者: F.M. Dong J.F. Liu R. Zhang

作者单位: Institute of Intelligent Vision and Image Information Affiliation, China Three Gorges University, Yichang 443002, China

会议类型: 国际会议

会议名称: China-Ireland International Conference on Information and Communications Technologies 2008(2008 中国-爱尔兰信息与通信技术国际会议 CIICT 2008)

会议地点: 北京

会议语种:英文

页码: 1-5

在线出版日期: 2008-09-26（万方平台首次上网日期，不代表论文的发表时间）