入侵检测技术因能同时检测来自网络外部的恶意攻击和内部的破坏行为而得到了广泛研究,然而,由于入侵检测技术自身的复杂性和不成熟性,在当前的大规模、分布式和高速的网络环境中还存在很多问题。本文从入侵检测技术概念、入侵检测技术分类出发,研究了分布式、自动化和智能化是入侵检测技术发展的方向,这需要入侵检测技术与防火墙等网络安全技术相结合。 However, due to the complexity and immaturity of intrusion detection technology itself, in the current large-scale, distributed and high-speed There are still many problems in the network environment. This dissertation starts from the concept of intrusion detection technology and the classification of intrusion detection technology. It is studied that distributed, automation and intelligence are the development direction of intrusion detection technology. This requires that intrusion detection technology and network security technology such as firewall are combined.