IDS匹配规则的动态调整方法的改进研究

etection based on Rule matching is a method that intrusion detection systems usually use, it is effective to improve the performance of IDS by increasing the detection speed of effective rule matching, when IDS face large number of rules. For a period of time, the type of network attacks are relatively concentrated, to increase detection rate of concentrated attacks can better improve the efficiency of intrusion detection system. A dynamic adjust rule matching method is put forward in this paper, by add rule match index, dynamic adjust rules by calculate their upward trend, improve data packet detecting speed and system’s detecting efficiency.