金诺网安入侵检测系统KIDS是由网络探测器(NIDS)、主机探测器(HIDS)和管理控制台组成的分布式系统。网络探测器从网络数据包中发现入侵的痕迹,主机探测器对主机系统的系统活动事件、日志信息进行分析,发现可疑行为。管理控制台对所有的探测器进行统一的集中式管理和监控。系统管理员可以通过一台管理控制台实施对全网的安全监控和管理。 Jinnuo network security intrusion detection system KIDS is a network of detectors (NIDS), host detectors (HIDS) and management console composed of distributed systems. The network detector finds traces of intrusion from network packets, and the host detector analyzes the system activity events and log information of the host system and finds out suspicious behaviors. The management console centrally manages and monitors all probes in a unified way. System administrators can implement security monitoring and management of the entire network through a management console.