Design and Implement of Linux Intrusion Detection System Based on Network Protocol Analysis

The architecture of network intrusion detection system based on network protocol analysis on Linux is provided. The design methods and realization technology of every module are discussed and implemented. The network intrusion detection theory and the IRDL (intrusion rules description language) based on the network protocol analysis is studied in detail.