Abstract:

In order to solve the problem of high missing alarm rate when the intrusion detection system works with fragment attack under the strong background traffic, the main parameters of evaluation of intrusion detection system are summarized, on top of which the test structure of Nidsbench platform is discussed and improved. Experimental results indicate a decrease missing alarm rate has been achieved using improved test structure (from 19%~49% to 4%~8%), which proves the effectiveness.

Key words: network security, intrusion detection system(IDS), evalution, test platform