本文综合了IDS与IPS的特点，将协议分析、网络流量分析与深度包检测技术相结合，提出一个新的网络防御系统一“基于协议分析的网络分布式入侵防御系统(Network Distributed Intrusion Prevention System Base on the Protocol Analysis，NDIPS)，同时给出了系统的基本实现，并利用现有仿真条件及网络基 础对部分检测防御技术进行了必要的评测与验证。该系统提高了网络对入侵的实 时阻止能力，提高了网络整体的安全性。-This

An intrusion detection system (IDS) is a device or software application that monitors network or system activities for malicious activities or policy violations and produces reports to a management station. Some systems may attempt to stop an intrusi

入侵检测和防御相关，真实suricata源码-Intrusion detection and prevention of related real suricata source