Research on Intrusion Detection and Defense Based on Computer Network

Intrusion detection and prevention of computer network system is an important technical means,but with the rapid development of high-speed network technology,intrusion detection and prevention systems,face serious challenges.This paper designes and implementes intrusion prevention system based on a computer network.Intrusion detection,while is able to directly to stop illegal within TCP / IP protocol stack packet,effectively improve the efficiency of defense systems.Meanwhile,in network intrusion detection and prevention system data collection process,this paper introduces statistical technical sampling,provides a reliable data sources,and reduces the system overhead.