隨著網(wǎng)絡(luò)攻擊方法和手段的不斷變化，相應(yīng)的IDS 也在不斷增多，設(shè)計(jì)有效的IDS
評(píng)估方案對(duì)保證網(wǎng)絡(luò)安全具有重要意義。本文在Web 攻擊分類的基礎(chǔ)上，結(jié)合IDS 評(píng)估方案的設(shè)計(jì)要求，克服現(xiàn)有評(píng)估方案不能較好地針對(duì)Web 攻擊的不足，提出了一種基于Web 攻擊分類的IDS 評(píng)估方案。經(jīng)過(guò)分析，該方案測(cè)試范圍較廣、針對(duì)性強(qiáng)和操作方便。
關(guān)鍵詞：網(wǎng)絡(luò)安全；Web 攻擊；IDS；評(píng)估方案
Abstract：With the continuous change of network attacks, the corresponding IDS also
increase. It is crucial to design effective schemes of IDS evaluation in order to
assure the network security. Based on the classification of Web attacks, this paper
provides a novel scheme of IDS evaluation on account with the request of IDS
evaluation and overcomes the inadequacy of the existed ones. After the analysis it
is proved that the scheme of IDS evaluation in this paper is convenient in applying,
target-shot, wider in test scope.
Key words：Network security; Web attacks; IDS; Schemes of Evaluation