查询词典 IDS

On one hand this text proceeds from technology of IDS, start with from studying the development of IDS and technological principle, can realize to one a concrete one honeypot inveigle IDS model of function further investigate; Study Honeynet system and key technology deeply on the other hand, excavate technology of the data to introduce the honeyed pot system at the same time , have optimized and strengthened the function of IDS system.

本文一方面从IDS的技术出发，研究IDS的发展和技术原理进而对一个具体的可实现蜜罐数据反馈和联动的IDS模型进行深入研究；另一方面深入地研究Honeynet系统及其核心技术，同时将数据挖掘技术引入蜜罐系统，优化和加强了蜜罐的数据价值并为IDS系统提供

IPS and IDS similar, but, IPS is designed to solve some of the shortcomings of IDS.

IPS与IDS类似，但是，IPS在设计上解决了IDS的一些缺陷。

But this kind of invasion cannot avoid the detection of IDS using the protocol analysis technology.(2) In the invasion activities of hackers using TCP, the actions about scanning and Denial of Service utilizing the three-handshake protocol are general. The characteristics of the actions are dynamic for its lie on a series of packets from beginning to end. So the IDS using the traditional pattern match technology cannot detect these actions effectively, but the IDS using the protocol analysis technology can do its.

2在利用TCP协议进行的黑客活动中，比较常用的是利用三次握手过程进行扫描行为和拒绝服务攻击，这类攻击的特征必须根据前后的一系列数据包才能确定，因此攻击特征具有动态性，很不适合于采用模式匹配作为信息检测技术的IDS，但协议分析技术可较为迅速地检测出这类攻击。

Compared with traditional invasion detection system has a lot of advantages to invade the detection system distributed: Distributed IDS is that a lot of measures the land to different data sources, adopts different measuring algorithms, measure together, cooperate and deal with, has improved the accuracy measured ; But distributed IDS can be used in the extensive network environment; Distributed IDS may use the special package to be punish and audit datum safely, help the system to be produced and invade the rule of measuring and produce and unusually measure models ; Distributed IDS analyses the behaviors of a lot of control points in coordination, may measure out and attack distributed in coordination ; The measuring of distributed IDS right a certain control point can be regarded as the early warning of other check points .

分布式入侵检测系统跟传统的入侵检测系统相比有很多优点：分布式IDS是多个检测域针对不同的数据来源，采用不同的检测算法，共同检测，协作处理，提高了检测的准确性；分布式IDS却可以用于大规模的网络环境；分布式IDS可以使用专门的组件处理安全审计数据，帮助系统生成入侵检测规则和生成异常检测模型；分布式IDS协同分析多个监控点的行为，就可能检测出分布式协同攻击；分布式IDS对某个监控点的检测可以作为对其他检测点的预警。

Taking NISDetector as a background, this paper discusses some implementation problems of intrusion detection system, and describes the technique that NISDetector took, includes: abnormal detection technique, data fusion technique, cooperate detection anti IDS eluding technique and alert reanalyze technique, security protection mechanism for IDS.

重点讨论了：异常行为检测技术、数据融合技术、协同检测技术、入侵检测系统的反规避技术、报警信息的二次分析技术和IDS的安全保护机制等问题。

The result of uroscopy of the proband was strong positive. There was a novel deletion mutation of c.876-877 del TC in the coding region of exon 6 of IDS gene, which was a hemizygous mutation. However, the mutation of his mother and sister was a heterozygous mutation. Detection of the exon 6 of IDS gene showed that the mutation was not found among normal controls and other patients with MPS I, IV, and VI other than MPS II. Homology comparison of amino acid sequences from different species showed that the phenylalanine glutamine of the mutation site of c.876-877 del TC located in p.292-293 was highly conserved. The activity of IDS enzyme of the proband was only 2.3 nmol/4 h/mL, which was much lower than normal; but the activity of IDS enzyme of his father, mother and sister was 641.9 nmol/4 h/mL, 95.8 nmol/4h/mL and 103.2 nmol/4h/mL, respectively.

结果显示：先证者尿检呈强阳性；其IDS基因exon 6编码区内存在c.876-877 del TC新缺失突变，为半合子突变，而其母、其姐为杂合突变；正常对照和其他非II型MPS患者的IDS基因exon 6的检测结果均未发现该突变；不同物种氨基酸序列的同源性比对显示： c.876-877 del TC突变所在的位置即p.292-293的苯丙氨酸谷氨酰胺高度保守；酶活性测定的结果显示：先证者的IDS酶活性仅为2.3 nmol/4 h/mL，大大低于正常值，而其父的为641.9 nmol/4 h/mL，其母的血浆酶活性为95.8 nmol/ 4h/mL，其姐的为103.2 nmol/4 h/mL。

through the existing analysis of network security and intrusion detection technology, this paper puts forward a cooperative intrusion detection method. this new method collects information distributedly, processes in multilateral cooperation, and constructs the large-network ids. then, it collects the information from dialing users to detect whether there are vulnerabilities and virus in individual or not. by means of such functions, this method only permits the users with reliable network repairing system or with the updated latest virus library to access to the campus network.

该文通过对现有校园网络安全及入侵检测技术的分析，提出一种基于协议分析的分布式入侵检测方法，采用分布收集信息，分布处理多方协作的方式，将基于主机的ids和基于网络的ids结合使用，构筑面向大型网络的ids；然后通过全局安全网络协作，收集拨号用户的信息，检查个体计算机是否存在漏洞、病毒，如果发现有就阻止其接入网络，强制其用到可信的网络修复系统或更新最新的病毒库后才可以正常接入校园网。

While protecting network, IDS brings a new trouble that IDS especially Distributed IDS would produce masses of alarms, most of which are redundant. How to effectively dispose these large amounts of alarms comes to be urgent.

然而，入侵检测系统在保护网络的同时也带来了一个新的问题：IDS会产生大量的报警数据，这些大量的报警数据中的大部分都是重复的、无效的。

If the wireless IDS is pre-configured with all the authorized WAPs and an unknown WAP is introduced to the area, the IDS will promptly identify it.

如果无线ids是预先配置与所有授权waps及一名身份不明 WAP的介绍给区，该IDS就会迅速作出鉴定。

The new mechanism is used for DIDS mainly, looks CIDS as a special example, focuses on communication speed of IDS and IDS' self-safety, reduces false alerts rate and single point of failure questions, can detect cooperation and Dos intrusions at the same time.

新策略主要应用于分布式IDS，并把集中式IDS看作分布式IDS的一个特例；主要着眼于提高IDS系统内部的通信速度和IDS系统自身安全性，降低了虚警率，解决了&单点失效&问题，同时能有效检测到协同、Dos等攻击。

As she looked at Warrington's manly face, and dark, melancholy eyes, she had settled in her mind that he must have been the victim of an unhappy attachment.

每逢看到沃林顿那刚毅的脸，那乌黑、忧郁的眼睛，她便会相信，他一定作过不幸的爱情的受害者。

Maybe they'll disappear into a pothole.

也许他们将在壶穴里消失