Design and implementation of a DIDS

With the fast development of computer network, the problem of network security becomes more and more serious. The single firewall can not solve the problem entirely and an intrusion detection system is helpful. This paper presents the design and development of a distributed intrusion detection system to protect the network security. Experiments shows that it works well.

I. Introduction

Nowadays, network security becomes a serious problem in the sense of both technology and law. In recent years, numerous network security events occured, for example, the DDOS events attacking Ebay, Yahoo website in 2000. In World Economic Forum Annual Meeting held in Davos in 2007, experts pointed out that among the 600 million computers connected to the internet, about one-fourth of them had been hacked and controlled by hackers. In recent years, the malicious code, such as Trojan horse, has been used to get economy profit, this is the so-called Gray economy. Behind of attack, a industry chain has been formed for this purpose. The hackers has directed to the economy advantage other than to make show of their ability as they did years ago [1]. How should we do in facing such a hack industrial chain?