入侵检测技术的不对称模型

自20世纪80年代初Denning关于入侵检测的开创性研究工作至今,各种具体的入侵检测技术大量涌现,但是还缺少一种实用的理论模型能够解释各种技术方法的本质原理机制。本文从信息不对称角度,提出入侵检测的不对称模型。并试图说明各种具体技术方法的检测性能都是入侵检测双方信息不对称性的外在体现。为此,引入不对称指数的概念,并讨论入侵检测双方性能与不对称指数的关系。

The Asymmetry Model of Intrusion Detection Technology

Various invasion detection technologies have appeared since Denning started his research work on the invasion detection in the early 1980s.But we still lack a practical theoretical model to explain their techniques principle.This article,based on the information asymmetry,poses asymmetry models used to detect the invasions,and tried to make out that any specific technical detections are the exhibition of the asymmetry of the invasion information of the both sides.Therefore,the concept of asymmetry index was introduced,and the relationship between the asymmetric indexes of the both sides of invasion detection is discussed.