The Study of Instruction Detection Systems Based on the Network Data Environment

With high speed development of the internet, network security is increasingly outstanding. In the large-scale high-traffic network environment, the traditional technologies for network-based intrusion detection system can not satisfy the needs for real-time processing for the growing network traffic. This paper presented a NetFlow based anomaly intrusion detection system. In addition, guidelines to properly configure and setup network device to minimize the possibilities that network attacks come from inside are also proposed. We propose an inexpensive and easy to implement way to perform the anomaly type intrusion detection based on the NetFlow information exported from the routers or other network probes. Our system can detect several types of network attack from inside or outside and perform counter maneuver accordingly.