基于Web攻擊分類的IDS評估方案設(shè)計

隨著網(wǎng)絡(luò)攻擊方法和手段的不斷變化，相應(yīng)的IDS 也在不斷增多，設(shè)計有效的IDS
評估方案對保證網(wǎng)絡(luò)安全具有重要意義。本文在Web 攻擊分類的基礎(chǔ)上，結(jié)合IDS 評估方案的設(shè)計要求，克服現(xiàn)有評估方案不能較好地針對Web 攻擊的不足，提出了一種基于Web 攻擊分類的IDS 評估方案。經(jīng)過分析，該方案測試范圍較廣、針對性強(qiáng)和操作方便。
關(guān)鍵詞：網(wǎng)絡(luò)安全；Web 攻擊；IDS；評估方案
Abstract：With the continuous change of network attacks, the corresponding IDS also
increase. It is crucial to design effective schemes of IDS evaluation in order to
assure the network security. Based on the classification of Web attacks, this paper
provides a novel scheme of IDS evaluation on account with the request of IDS
evaluation and overcomes the inadequacy of the existed ones. After the analysis it
is proved that the scheme of IDS evaluation in this paper is convenient in applying,
target-shot, wider in test scope.
Key words：Network security; Web attacks; IDS; Schemes of Evaluation