| 引用本文: | 董斌,张少敏,王保义.基于Agent和STAT的入侵检测系统在电力信息系统的研究[J].电力自动化设备,2006,(1):37-40 |
| .Research on Agent & STAT-based intrusion detection system of electric power information system[J].Electric Power Automation Equipment,2006,(1):37-40 |
|
|
| 摘要: |
| 首先，分析了电力系统信息网络入侵检测的必要性，然后在状态转移分析STAT（State Transition Analysis Tool）入侵检测工具的基础上，引入了Agent技术，提出了一种基于Agent和STAT的入侵检测系统。该系统通过Agent技术实现了规则更新，并且利用STAT技术使该系统可以实时感知入侵状态和进行入侵分析。实验结果表明，基于Agent和STAT的入侵检测系统能够有效地提高检测率。针对电力系统的特点分析了该系统在其中的应用。 |
| 关键词: 入侵检测 状态转移分析 Agent技术 网络安全 |
| DOI： |
| 分类号:TP393.08 |
| 基金项目: |
|
| Research on Agent & STAT-based intrusion detection system of electric power information system |
|
DONG Bin ZHANG Shao-min WANG Bao-yi
|
| Abstract: |
| The necessity of intrusion detection for electric power information network is analy-zed and a new intrusion detection system based on both Agent and STAT(State Transition Analysis Tool)is proposed by introducing the Agent-technique.The new system updates rules by Agent-technique,and perceives real-timely the state of intruding activities and analyzes them by STAT.The experimental result indicates that the intrusion detection system based on Agent and STAT is capable of increasing efficiently the detection rate.Its application in electric power system is analyzed. |
| Key words: intrusion detection state transition analysis Agent technique network security |
