Transcription of 침입탐지시스템(IDS) 개론(1) 분류 - AhnLab
1 Technical report (IDS) (1) .. 1.. 3. 2.. 3.. 3. NIDS HIDS .. 5. NIDS .. 5. HIDS .. 5.. 6. 3.. 7. (1) 3. 1.. , ..txt .. (Cracker) . , .. \rm ?rf / .. , . ? . , . , . (Firewall) , . (Intrusion Detection System, IDS) .. , . , . , .. , . , .. , , .. 2.. , .. , .. Copyright 2002 by AhnLab , Inc. All rights reserved. (1) 4. (Network-based Intrusion Detection System, NIDS) (Host-based Intrusion Detection System, HIDS) .. NIDS , . (Operating System, OS) (Packet).. NIDS . (Sniffing) , NIDS .. , HIDS . HIDS .. HIDS . , . HIDS (system call), . (Log), (Integrity) . HIDS . , HIDS , . NIDS , HIDS . , (Network Node Intrusion Detection, NNID) . NNID , . NIDS . IDS . NIDS . HIDS . NIDS . HIDS .. , (Remote Attack) NIDS , . (Local Attack) HIDS .. , .. NIDS . NIDS HIDS .. Copyright 2002 by AhnLab , Inc. All rights reserved. (1) 5. NIDS HIDS . NDIS. NIDS HIDS , NIDS . HIDS .. , .. HIDS , HIDS . , . , .. , NIDS.
2 , HIDS , . , . NIDS . , .. NIDS , .. , .. NIDS .. HIDS . (Multi Host-based Intrusion Detection System) . HIDS .. HIDS. HIDS , . NIDS . , .. NIDS . Copyright 2002 by AhnLab , Inc. All rights reserved. (1) 6. NIDS . HIDS , . False Positive , False Negative .. False Positive False Negative . HIDS . HIDS .. HIDS . NIDS .. NIDS HIDS .. , . (misuse detection) (anomaly detection) .. (Signature) , . , .. , , .. , . False Positive , . False Negative . , .. , .. Copyright 2002 by AhnLab , Inc. All rights reserved. (1) 7.. , .. False Negative . False Positive , . , (commercial) .. , .. (Hybrid IDS) . ( NIDS HIDS . , .). 3.. , .. , .. Copyright 2002 by AhnLab , Inc. All rights reserved.
