{"id":478126,"date":"2023-08-09T09:27:52","date_gmt":"2023-08-09T09:27:52","guid":{"rendered":""},"modified":"2023-09-05T11:16:09","modified_gmt":"2023-09-05T11:16:09","slug":"network-based-ids","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/network-based-ids\/","title":{"rendered":"\u57fa\u4e8e\u7f51\u7edc\u7684 ID"},"content":{"rendered":"<p>\u57fa\u4e8e\u7f51\u7edc\u7684\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf (NIDS) \u662f\u73b0\u4ee3\u7f51\u7edc\u5b89\u5168\u7b56\u7565\u7684\u91cd\u8981\u7ec4\u6210\u90e8\u5206\u3002\u5b83\u662f\u9488\u5bf9\u9488\u5bf9\u8ba1\u7b97\u673a\u7f51\u7edc\u7684\u6f5c\u5728\u7f51\u7edc\u5a01\u80c1\u548c\u653b\u51fb\u7684\u9632\u5fa1\u63aa\u65bd\u3002NIDS \u5b9e\u65f6\u76d1\u63a7\u7f51\u7edc\u6d41\u91cf\uff0c\u5206\u6790\u5176\u4e2d\u662f\u5426\u5b58\u5728\u6076\u610f\u6d3b\u52a8\u6216\u53ef\u7591\u6a21\u5f0f\u7684\u8ff9\u8c61\u3002\u672c\u6587\u6df1\u5165\u63a2\u8ba8\u4e86\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u6982\u5ff5\u53ca\u5176\u5728\u4ee3\u7406\u670d\u52a1\u5668\u63d0\u4f9b\u5546 OneProxy (oneproxy.pro) \u7f51\u7ad9\u4e0a\u7684\u5e94\u7528\u3002<\/p>\n<h2>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u8d77\u6e90\u5386\u53f2<\/h2>\n<p>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u8d77\u6e90\u53ef\u4ee5\u8ffd\u6eaf\u5230\u8ba1\u7b97\u673a\u7f51\u7edc\u548c\u4e92\u8054\u7f51\u7684\u65e9\u671f\u3002\u968f\u7740\u8fde\u63a5\u7cfb\u7edf\u6570\u91cf\u7684\u589e\u52a0\uff0c\u6f5c\u5728\u7684\u5b89\u5168\u98ce\u9669\u4e5f\u968f\u4e4b\u589e\u52a0\u3002\u65e9\u671f\u68c0\u6d4b\u548c\u9884\u9632\u5165\u4fb5\u7684\u5c1d\u8bd5\u4e3b\u8981\u4f9d\u8d56\u4e8e\u57fa\u4e8e\u4e3b\u673a\u7684\u89e3\u51b3\u65b9\u6848\uff0c\u8fd9\u4e9b\u89e3\u51b3\u65b9\u6848\u7684\u8303\u56f4\u6709\u9650\uff0c\u5e76\u4e14\u901a\u5e38\u65e0\u6cd5\u6709\u6548\u62b5\u5fa1\u590d\u6742\u7684\u653b\u51fb\u3002<\/p>\n<p>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u9996\u6b21\u88ab\u63d0\u53ca\u662f\u5728 20 \u4e16\u7eaa 80 \u5e74\u4ee3\u548c 90 \u5e74\u4ee3\u7684\u5b66\u672f\u8bba\u6587\u548c\u65e9\u671f\u7814\u7a76\u4e2d\u3002\u7136\u800c\uff0c\u76f4\u5230 20 \u4e16\u7eaa 90 \u5e74\u4ee3\u672b\u548c 21 \u4e16\u7eaa\u521d\uff0c\u968f\u7740\u7f51\u7edc\u5a01\u80c1\u4e0d\u65ad\u5347\u7ea7\uff0c\u4f01\u4e1a\u5bfb\u6c42\u66f4\u5f3a\u5927\u7684\u9632\u5fa1\u673a\u5236\uff0cNIDS \u624d\u5177\u6709\u5b9e\u9645\u610f\u4e49\u3002<\/p>\n<h2>\u5173\u4e8e\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u8be6\u7ec6\u4fe1\u606f<\/h2>\n<p>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u65e8\u5728\u5728\u7f51\u7edc\u5c42\u8fd0\u884c\uff0c\u76d1\u63a7\u548c\u68c0\u67e5\u901a\u8fc7\u5404\u79cd\u7f51\u7edc\u8bbe\u5907\uff08\u5982\u8def\u7531\u5668\u548c\u4ea4\u6362\u673a\uff09\u7684\u6d41\u91cf\u3002\u5176\u4e3b\u8981\u76ee\u6807\u662f\u8bc6\u522b\u548c\u8b66\u544a\u6f5c\u5728\u7684\u5b89\u5168\u4e8b\u4ef6\u6216\u7b56\u7565\u8fdd\u89c4\u884c\u4e3a\uff0c\u4f7f\u7ba1\u7406\u5458\u80fd\u591f\u8fc5\u901f\u505a\u51fa\u54cd\u5e94\u5e76\u51cf\u8f7b\u653b\u51fb\u7684\u5f71\u54cd\u3002<\/p>\n<p>NIDS \u6839\u636e\u9884\u5b9a\u4e49\u89c4\u5219\u6216\u884c\u4e3a\u6a21\u5f0f\u8fd0\u884c\u3002\u5f53\u7f51\u7edc\u6d41\u91cf\u7b26\u5408\u8fd9\u4e9b\u89c4\u5219\u6216\u504f\u79bb\u9884\u671f\u884c\u4e3a\u65f6\uff0c\u7cfb\u7edf\u4f1a\u53d1\u51fa\u8b66\u62a5\u3002\u8fd9\u79cd\u4e3b\u52a8\u65b9\u6cd5\u4f7f\u5b89\u5168\u56e2\u961f\u80fd\u591f\u5feb\u901f\u5e94\u5bf9\u65b0\u51fa\u73b0\u7684\u5a01\u80c1\uff0c\u5e76\u6709\u52a9\u4e8e\u4fdd\u62a4\u654f\u611f\u6570\u636e\u548c\u5173\u952e\u8d44\u4ea7\u3002<\/p>\n<h2>\u57fa\u4e8e\u7f51\u7edc\u7684\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf\u7684\u5185\u90e8\u7ed3\u6784<\/h2>\n<p>\u57fa\u4e8e\u7f51\u7edc\u7684IDS\u7684\u5185\u90e8\u7ed3\u6784\u7531\u51e0\u4e2a\u5173\u952e\u7ec4\u4ef6\u7ec4\u6210\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u6570\u636e\u5305\u6355\u83b7<\/strong>\uff1aNIDS \u6355\u83b7\u7a7f\u8d8a\u76ee\u6807\u7cfb\u7edf\u7f51\u7edc\u6bb5\u7684\u7f51\u7edc\u6570\u636e\u5305\u3002\u7136\u540e\u5206\u6790\u8fd9\u4e9b\u6570\u636e\u5305\u4ee5\u8bc6\u522b\u6f5c\u5728\u5a01\u80c1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u57fa\u4e8e\u7b7e\u540d\u7684\u68c0\u6d4b<\/strong>\uff1a\u8fd9\u79cd\u65b9\u6cd5\u6d89\u53ca\u4f7f\u7528\u5df2\u77e5\u653b\u51fb\u7279\u5f81\u7684\u6570\u636e\u5e93\u6765\u8bc6\u522b\u6076\u610f\u6d41\u91cf\u6a21\u5f0f\u3002\u5f53 NIDS \u5c06\u6570\u636e\u5305\u4e0e\u7279\u5f81\u5339\u914d\u65f6\uff0c\u5b83\u4f1a\u751f\u6210\u8b66\u62a5\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u57fa\u4e8e\u5f02\u5e38\u7684\u68c0\u6d4b<\/strong>\uff1a\u5f02\u5e38\u68c0\u6d4b\u6280\u672f\u4e13\u6ce8\u4e8e\u8bc6\u522b\u4e0d\u5bfb\u5e38\u6216\u5f02\u5e38\u7684\u884c\u4e3a\u6a21\u5f0f\u3002\u901a\u8fc7\u5efa\u7acb\u6b63\u5e38\u7f51\u7edc\u884c\u4e3a\u7684\u57fa\u7ebf\uff0cNIDS \u53ef\u4ee5\u6807\u8bb0\u53ef\u80fd\u8868\u660e\u6b63\u5728\u8fdb\u884c\u653b\u51fb\u7684\u504f\u5dee\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u673a\u5668\u5b66\u4e60<\/strong>\uff1a\u4e00\u4e9b\u5148\u8fdb\u7684 NIDS \u89e3\u51b3\u65b9\u6848\u5229\u7528\u673a\u5668\u5b66\u4e60\u7b97\u6cd5\u6765\u68c0\u6d4b\u4ee5\u524d\u672a\u77e5\u7684\u5a01\u80c1\u3002\u673a\u5668\u5b66\u4e60\u6a21\u578b\u53ef\u4ee5\u6839\u636e\u7ecf\u9a8c\u8c03\u6574\u548c\u63d0\u9ad8\u5176\u68c0\u6d4b\u80fd\u529b\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8b66\u793a\u673a\u5236<\/strong>\uff1a\u5f53 NIDS \u8bc6\u522b\u51fa\u53ef\u7591\u6d3b\u52a8\u65f6\uff0c\u5b83\u4f1a\u751f\u6210\u8b66\u62a5\u5e76\u53d1\u9001\u7ed9\u5b89\u5168\u56e2\u961f\u8fdb\u884c\u8c03\u67e5\u548c\u54cd\u5e94\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u57fa\u4e8e\u7f51\u7edc\u7684\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf\u4e3b\u8981\u7279\u5f81\u5206\u6790<\/h2>\n<p>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u63d0\u4f9b\u4e86\u51e0\u4e2a\u5173\u952e\u529f\u80fd\uff0c\u4f7f\u5176\u6210\u4e3a\u7ec4\u7ec7\u5b89\u5168\u57fa\u7840\u8bbe\u65bd\u7684\u91cd\u8981\u7ec4\u6210\u90e8\u5206\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u5b9e\u65f6\u76d1\u63a7<\/strong>\uff1aNIDS \u63d0\u4f9b\u5bf9\u7f51\u7edc\u6d41\u91cf\u7684\u6301\u7eed\u76d1\u63a7\uff0c\u786e\u4fdd\u5728\u5a01\u80c1\u53d1\u751f\u65f6\u7acb\u5373\u68c0\u6d4b\u5230\u5a01\u80c1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u53ef\u6269\u5c55\u6027<\/strong>\uff1aNIDS\u53ef\u4ee5\u90e8\u7f72\u5728\u5927\u578b\u7f51\u7edc\u4e2d\uff0c\u9002\u5408\u5177\u6709\u5e7f\u6cdb\u7f51\u7edc\u57fa\u7840\u8bbe\u65bd\u7684\u4f01\u4e1a\u548c\u670d\u52a1\u63d0\u4f9b\u5546\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u81ea\u52a8\u8b66\u62a5<\/strong>\uff1a\u7cfb\u7edf\u81ea\u52a8\u751f\u6210\u8b66\u62a5\uff0c\u80fd\u591f\u5feb\u901f\u54cd\u5e94\u4e8b\u4ef6\u5e76\u51cf\u5c11\u6f5c\u5728\u8fdd\u89c4\u884c\u4e3a\u7684\u5f71\u54cd\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u96c6\u4e2d\u7ba1\u7406<\/strong>\uff1aNIDS \u53ef\u4ee5\u96c6\u4e2d\u7ba1\u7406\uff0c\u7b80\u5316\u5206\u5e03\u5f0f\u73af\u5883\u4e4b\u95f4\u7684\u7ba1\u7406\u548c\u534f\u8c03\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u80fd\u89c1\u5ea6<\/strong>\uff1aNIDS \u63d0\u4f9b\u4e86\u6709\u5173\u7f51\u7edc\u6d3b\u52a8\u7684\u5b9d\u8d35\u89c1\u89e3\uff0c\u6709\u52a9\u4e8e\u4e86\u89e3\u7f51\u7edc\u4f7f\u7528\u6a21\u5f0f\u5e76\u786e\u5b9a\u6f5c\u5728\u7684\u6539\u8fdb\u9886\u57df\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7c7b\u578b<\/h2>\n<p>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u4e3b\u8981\u6709\u4e24\u79cd\u7c7b\u578b\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7c7b\u578b<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u57fa\u4e8e\u7b7e\u540d<\/td>\n<td>\u4f9d\u9760\u9884\u5b9a\u4e49\u7684\u7b7e\u540d\u6216\u5df2\u77e5\u653b\u51fb\u7684\u6a21\u5f0f\u6765\u8bc6\u522b\u6076\u610f\u6d41\u91cf\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u57fa\u4e8e\u5f02\u5e38<\/td>\n<td>\u5efa\u7acb\u6b63\u5e38\u7f51\u7edc\u884c\u4e3a\u7684\u57fa\u7ebf\uff0c\u5e76\u5728\u51fa\u73b0\u504f\u5dee\u65f6\u53d1\u51fa\u8b66\u62a5\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u95ee\u9898\u548c\u89e3\u51b3\u65b9\u6848<\/h2>\n<h3>\u4f7f\u7528\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u65b9\u6cd5<\/h3>\n<ol>\n<li>\n<p><strong>\u5a01\u80c1\u68c0\u6d4b\u4e0e\u9884\u9632<\/strong>\uff1aNIDS \u4e3b\u52a8\u8bc6\u522b\u5e76\u51cf\u8f7b\u6f5c\u5728\u5a01\u80c1\uff0c\u4fdd\u62a4\u7f51\u7edc\u514d\u53d7\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u548c\u6570\u636e\u6cc4\u9732\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5408\u89c4\u76d1\u63a7<\/strong>\uff1aNIDS \u901a\u8fc7\u76d1\u63a7\u7f51\u7edc\u6d3b\u52a8\u548c\u62a5\u544a\u4efb\u4f55\u53ef\u7591\u884c\u4e3a\u5e2e\u52a9\u7ec4\u7ec7\u6ee1\u8db3\u6cd5\u89c4\u9075\u4ece\u6027\u8981\u6c42\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6cd5\u533b\u5206\u6790<\/strong>\uff1a\u5982\u679c\u53d1\u751f\u5b89\u5168\u4e8b\u4ef6\uff0c\u53ef\u4ee5\u5206\u6790 NIDS \u65e5\u5fd7\u6765\u4e86\u89e3\u653b\u51fb\u7684\u6027\u8d28\u548c\u8303\u56f4\u3002<\/p>\n<\/li>\n<\/ol>\n<h3>\u95ee\u9898\u4e0e\u89e3\u51b3\u65b9\u6848<\/h3>\n<ol>\n<li>\n<p><strong>\u8bef\u62a5<\/strong>\uff1aNIDS \u53ef\u80fd\u4f1a\u4ea7\u751f\u8bef\u62a5\uff0c\u5bfc\u81f4\u4e0d\u5fc5\u8981\u7684\u8b66\u62a5\u5e76\u6d6a\u8d39\u5b89\u5168\u8d44\u6e90\u3002\u5b9a\u671f\u8c03\u6574\u548c\u5b8c\u5584\u68c0\u6d4b\u89c4\u5219\u53ef\u4ee5\u51cf\u5c11\u8bef\u62a5\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u52a0\u5bc6<\/strong>\uff1a\u52a0\u5bc6\u6d41\u91cf\u53ef\u4ee5\u8eb2\u907f\u4f20\u7edf NIDS\u3002\u5b9e\u65bd SSL\/TLS \u89e3\u5bc6\u548c\u68c0\u67e5\u673a\u5236\u53ef\u4ee5\u5e2e\u52a9\u5e94\u5bf9\u8fd9\u4e00\u6311\u6218\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7f51\u7edc\u6027\u80fd\u5f71\u54cd<\/strong>\uff1aNIDS \u4f1a\u6d88\u8017\u7f51\u7edc\u8d44\u6e90\uff0c\u5f71\u54cd\u6574\u4f53\u6027\u80fd\u3002\u6218\u7565\u6027\u5730\u653e\u7f6e NIDS \u4f20\u611f\u5668\u548c\u8d1f\u8f7d\u5e73\u8861\u53ef\u4ee5\u51cf\u8f7b\u8fd9\u79cd\u5f71\u54cd\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u540c\u7c7b\u4ea7\u54c1\u6bd4\u8f83<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u5b66\u671f<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u57fa\u4e8e\u7f51\u7edc\u7684\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf (NIDS)<\/td>\n<td>\u5b9e\u65f6\u76d1\u63a7\u7f51\u7edc\u6d41\u91cf\uff0c\u4ee5\u8bc6\u522b\u548c\u8b66\u544a\u6f5c\u5728\u7684\u5b89\u5168\u4e8b\u4ef6\u6216\u8fdd\u53cd\u653f\u7b56\u7684\u884c\u4e3a\u3002\u5728\u7f51\u7edc\u5c42\u8fd0\u884c\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u57fa\u4e8e\u4e3b\u673a\u7684\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf (HIDS)<\/td>\n<td>\u4e13\u6ce8\u4e8e\u5355\u4e2a\u4e3b\u673a\u7cfb\u7edf\uff0c\u76d1\u63a7\u5355\u4e2a\u8bbe\u5907\u4e0a\u7684\u6d3b\u52a8\u3002\u9002\u7528\u4e8e\u68c0\u6d4b\u7279\u5b9a\u4e8e\u4e3b\u673a\u7684\u5a01\u80c1\uff0c\u4f46\u53ef\u80fd\u4f1a\u9519\u8fc7\u7f51\u7edc\u8303\u56f4\u7684\u653b\u51fb\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5165\u4fb5\u9632\u5fa1\u7cfb\u7edf\uff08IPS\uff09<\/td>\n<td>\u4e0e NIDS \u7c7b\u4f3c\uff0c\u4f46\u80fd\u591f\u5b9e\u65f6\u4e3b\u52a8\u963b\u6b62\u6216\u7f13\u89e3\u5a01\u80c1\u3002\u7ed3\u5408\u4e86\u68c0\u6d4b\u548c\u9884\u9632\u529f\u80fd\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u9632\u706b\u5899<\/td>\n<td>\u5728\u53ef\u4fe1\u7f51\u7edc\u548c\u4e0d\u53ef\u4fe1\u7f51\u7edc\u4e4b\u95f4\u63d0\u4f9b\u5c4f\u969c\uff0c\u6839\u636e\u9884\u5b9a\u4e49\u89c4\u5219\u63a7\u5236\u6d41\u91cf\u3002\u53ef\u4ee5\u4f5c\u4e3a NIDS \u7684\u8865\u5145\uff0c\u9632\u6b62\u67d0\u4e9b\u7c7b\u578b\u7684\u6d41\u91cf\u5230\u8fbe\u6613\u53d7\u653b\u51fb\u7684\u7cfb\u7edf\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u672a\u6765\u7684\u89c2\u70b9\u548c\u6280\u672f<\/h2>\n<p>\u57fa\u4e8e\u7f51\u7edc\u7684IDS\u7684\u672a\u6765\u524d\u666f\u5149\u660e\uff0c\u65b0\u5174\u6280\u672f\u4e0d\u65ad\u589e\u5f3a\u5176\u529f\u80fd\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u4eba\u5de5\u667a\u80fd\u548c\u673a\u5668\u5b66\u4e60<\/strong>\uff1a\u5148\u8fdb\u7684\u4eba\u5de5\u667a\u80fd\u7b97\u6cd5\u5c06\u4f7f NIDS \u80fd\u591f\u8bc6\u522b\u590d\u6742\u7684\u5a01\u80c1\u5e76\u6709\u6548\u9002\u5e94\u4e0d\u65ad\u53d1\u5c55\u7684\u653b\u51fb\u6280\u672f\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u884c\u4e3a\u5206\u6790<\/strong>\uff1aNIDS \u5c06\u4e13\u6ce8\u4e8e\u884c\u4e3a\u5206\u6790\uff0c\u8bc6\u522b\u504f\u79bb\u6b63\u5e38\u6a21\u5f0f\u7684\u884c\u4e3a\uff0c\u800c\u4e0d\u662f\u4ec5\u4ec5\u4f9d\u8d56\u4e8e\u7279\u5f81\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u57fa\u4e8e\u4e91\u7684 NIDS<\/strong>\uff1a\u57fa\u4e8e\u4e91\u7684 NIDS \u89e3\u51b3\u65b9\u6848\u5c06\u4e3a\u4e91\u539f\u751f\u73af\u5883\u63d0\u4f9b\u53ef\u6269\u5c55\u4e14\u7075\u6d3b\u7684\u4fdd\u62a4\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u96c6\u6210\u5b89\u5168\u751f\u6001\u7cfb\u7edf<\/strong>\uff1aNIDS \u5c06\u878d\u5165\u66f4\u5e7f\u6cdb\u7684\u5b89\u5168\u751f\u6001\u7cfb\u7edf\uff0c\u4e0e\u5176\u4ed6\u5b89\u5168\u89e3\u51b3\u65b9\u6848\u534f\u540c\u5de5\u4f5c\uff0c\u5b9e\u73b0\u5168\u9762\u9632\u5fa1\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4ee3\u7406\u670d\u52a1\u5668\u5982\u4f55\u4e0e\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u5173\u8054<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\uff08\u4f8b\u5982 OneProxy (oneproxy.pro) \u63d0\u4f9b\u7684\u4ee3\u7406\u670d\u52a1\u5668\uff09\u5728\u589e\u5f3a\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u6709\u6548\u6027\u65b9\u9762\u53d1\u6325\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\u3002\u5f53\u7528\u6237\u901a\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\u8fde\u63a5\u5230\u4e92\u8054\u7f51\u65f6\uff0c\u4ed6\u4eec\u7684\u7f51\u7edc\u6d41\u91cf\u5728\u5230\u8fbe\u76ee\u6807\u670d\u52a1\u5668\u4e4b\u524d\u4f1a\u901a\u8fc7\u4ee3\u7406\u91cd\u65b0\u8def\u7531\u3002\u8fd9\u79cd\u5b89\u6392\u5177\u6709\u4ee5\u4e0b\u597d\u5904\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u533f\u540d<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u63a9\u76d6\u7f51\u7edc\u6d41\u91cf\u7684\u6765\u6e90\uff0c\u4f7f\u653b\u51fb\u8005\u66f4\u96be\u8bc6\u522b\u6f5c\u5728\u76ee\u6807\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8fc7\u6ee4\u548c\u5185\u5bb9\u63a7\u5236<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u963b\u6b62\u5bf9\u6076\u610f\u7f51\u7ad9\u7684\u8bbf\u95ee\u5e76\u8fc7\u6ee4\u5185\u5bb9\uff0c\u964d\u4f4e\u7528\u6237\u65e0\u610f\u4e2d\u8bbf\u95ee\u6709\u5bb3\u8d44\u6e90\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4ea4\u901a\u5de1\u68c0<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u68c0\u67e5\u5165\u7ad9\u548c\u51fa\u7ad9\u6d41\u91cf\uff0c\u5e2e\u52a9\u68c0\u6d4b\u548c\u963b\u6b62\u6076\u610f\u6d3b\u52a8\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8d1f\u8377\u5206\u914d<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5c06\u7f51\u7edc\u6d41\u91cf\u5206\u6563\u5230\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u4ece\u800c\u51cf\u5c11\u5355\u4e2a\u8d44\u6e90\u7684\u8d1f\u8f7d\u5e76\u53ef\u80fd\u51cf\u8f7b DDoS \u653b\u51fb\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u6d4f\u89c8\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ol>\n<li>\n<p><a href=\"https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-94\/archive\/2007-01-01\" target=\"_new\" rel=\"noopener nofollow\">NIST \u7279\u522b\u51fa\u7248\u7269 800-94\uff1a\u5165\u4fb5\u68c0\u6d4b\u548c\u9884\u9632\u7cfb\u7edf\u6307\u5357<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.sans.org\/intrusion-detection-faq\" target=\"_new\" rel=\"noopener nofollow\">SANS \u7814\u7a76\u6240\uff1a\u5165\u4fb5\u68c0\u6d4b\u5e38\u89c1\u95ee\u9898\u89e3\u7b54<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/intrusion-detection-systems\/index.html\" target=\"_new\" rel=\"noopener nofollow\">\u601d\u79d1\uff1a\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/attack.mitre.org\/techniques\/T1059\/001\/\" target=\"_new\" rel=\"noopener nofollow\">MITRE ATT&amp;CK\uff1a\u7f51\u7edc\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf (NIDS)<\/a><\/p>\n<\/li>\n<\/ol>\n<p>\u603b\u4e4b\uff0c\u57fa\u4e8e\u7f51\u7edc\u7684 IDS \u662f\u4e00\u79cd\u91cd\u8981\u7684\u7f51\u7edc\u5b89\u5168\u5de5\u5177\uff0c\u53ef\u76d1\u63a7\u7f51\u7edc\u6d41\u91cf\u3001\u68c0\u6d4b\u6f5c\u5728\u5a01\u80c1\u5e76\u5e2e\u52a9\u4fdd\u62a4\u7ec4\u7ec7\u514d\u53d7\u5404\u79cd\u7f51\u7edc\u653b\u51fb\u3002\u968f\u7740\u6280\u672f\u7684\u4e0d\u65ad\u8fdb\u6b65\uff0cNIDS \u5c06\u4e0e\u5176\u4ed6\u5b89\u5168\u89e3\u51b3\u65b9\u6848\u4e00\u8d77\u53d1\u5c55\uff0c\u786e\u4fdd\u66f4\u5b89\u5168\u3001\u66f4\u5177\u5f39\u6027\u7684\u6570\u5b57\u73af\u5883\u3002\u4e0e\u4ee3\u7406\u670d\u52a1\u5668\u7ed3\u5408\u4f7f\u7528\u65f6\uff0cNIDS \u53ef\u4ee5\u8fdb\u4e00\u6b65\u52a0\u5f3a\u7ec4\u7ec7\u7684\u5b89\u5168\u6001\u52bf\uff0c\u4e3a\u7f51\u7edc\u5a01\u80c1\u63d0\u4f9b\u989d\u5916\u7684\u9632\u5fa1\u5c42\u3002<\/p>","protected":false},"featured_media":478127,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478126","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Network-Based IDS for the Website of Proxy Server Provider OneProxy (oneproxy.pro)<\/mark>","faq_items":[{"question":"What is Network-Based IDS?","answer":"<p>Network-Based IDS (NIDS) is a cybersecurity system that monitors network traffic in real-time to identify potential security threats and policy violations. It operates at the network layer, analyzing data as it flows through routers and switches.<\/p>"},{"question":"How does Network-Based IDS work?","answer":"<p>NIDS works by using predefined rules or behavioral patterns to identify malicious activities in network traffic. When the system detects matches with these rules or deviations from expected behaviors, it generates alerts for prompt incident response.<\/p>"},{"question":"What are the key features of Network-Based IDS?","answer":"<ul><li>Real-Time Monitoring: NIDS continuously monitors network traffic, providing immediate threat detection.<\/li><li>Scalability: It can be deployed in large-scale networks, making it suitable for enterprises and service providers.<\/li><li>Automated Alerting: NIDS generates alerts automatically, facilitating swift incident response.<\/li><li>Centralized Management: The system can be centrally managed for easier administration.<\/li><\/ul>"},{"question":"What types of Network-Based IDS exist?","answer":"<p>There are two main types of NIDS:<\/p><ol><li>Signature-Based: Relies on known attack signatures to identify malicious traffic.<\/li><li>Anomaly-Based: Establishes normal behavior baselines and alerts on deviations.<\/li><\/ol>"},{"question":"How is Network-Based IDS used, and what problems can arise?","answer":"<p>NIDS is used for:<\/p><ul><li>Threat Detection and Prevention<\/li><li>Compliance Monitoring<\/li><li>Forensic Analysis<\/li><\/ul><p>Potential problems include false positives, encryption evasion, and network performance impact. Solutions involve rule tuning and SSL\/TLS decryption.<\/p>"},{"question":"How does Network-Based IDS compare to other security terms?","answer":"<ul><li>Host-Based IDS (HIDS) focuses on individual host systems, while NIDS monitors network-wide traffic.<\/li><li>Intrusion Prevention System (IPS) combines detection and prevention capabilities, while NIDS focuses on detection.<\/li><li>Firewall provides a barrier between networks, complementing NIDS by preventing certain types of traffic.<\/li><\/ul>"},{"question":"What are the future perspectives of Network-Based IDS?","answer":"<p>The future of NIDS includes AI and machine learning integration for better threat identification, behavioral analytics, cloud-based solutions, and integration into broader security ecosystems.<\/p>"},{"question":"How are proxy servers associated with Network-Based IDS?","answer":"<p>Proxy servers enhance NIDS effectiveness by providing anonymity, content filtering, traffic inspection, and load distribution. They work in tandem to bolster an organization's cybersecurity defense.<\/p>"},{"question":"Where can I find more information about Network-Based IDS?","answer":"<p>For more information, check out the following resources:<\/p><ol><li><a href=\"https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-94\/archive\/2007-01-01\" target=\"_new\">NIST Special Publication 800-94: Guide to Intrusion Detection and Prevention Systems<\/a><\/li><li><a href=\"https:\/\/www.sans.org\/intrusion-detection-faq\" target=\"_new\">SANS Institute: Intrusion Detection FAQ<\/a><\/li><li><a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/intrusion-detection-systems\/index.html\" target=\"_new\">Cisco: Intrusion Detection Systems<\/a><\/li><li><a href=\"https:\/\/attack.mitre.org\/techniques\/T1059\/001\/\" target=\"_new\">MITRE ATT&amp;CK: Network Intrusion Detection Systems (NIDS)<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478126\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/478127"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=478126"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}