CryptographyandNetworkSecurity四道防线内容一、入侵者Intruders入侵者IntrudersIntruders“头号电脑黑客”凯文米特尼克KevinMitnick“头号电脑黑客”凯文米特尼克KevinMitnick“头号电脑黑客”凯文米特尼克KevinMitnick罗伯特泰潘莫里斯罗伯特泰潘莫里斯什么是黑客？黑客入侵和破坏的危险黑客的基本素质黑客的基本素质黑客WilyHacker入侵技术IntrusionTechniquesPasswordGuessingPasswordCapture二、入侵检测AdaptiveNetworkSecurityModel自适应网络安全模型IntrusionDetection三、入侵检测模型IDESCommonIntrusionDetectionFramework四、入侵检测技术ApproachestoIntrusionDetection入侵检测方法AuditRecords审计记录1.统计异常检测StatisticalAnomalyDetection统计异常检测AuditRecordAnalysis2.基于规则的检测Rule-BasedIntrusionDetectionRule-BasedIntrusionDetection基于规则的渗透鉴别说明1).Base-RateFallacy2).分布式入侵检测DistributedIntrusionDetectionDistributedIntrusionDetection-ArchitectureDistributedIntrusionDetection–AgentImplementation3)入侵诱骗技术Honeypots密罐防火墙与IDS五、安全审计Summary