A study of high sensitive illegal access detection system using distributed and cooperative scan detecting method.

近年来，不共享公共媒体的网络得到了广泛的应用。SCAN是非法访问的一种标志，由于其狡猾的诡计而变得非常难以检测。在本研究中，我们提出了一种分布式协作的方式来成功地检测这些SCANS，通过将NIDS分散在网络的监控位置上。通过对真实的网络数据的仿真，验证了该方法的有效性。与传统方法相比，该方法可以在较短的时间内检测出扫描网络。此外，所提出的方法可以抑制冗余的控制消息，使只有少量的流量之间的管理器和NIDS需要管理系统。从这些结果来看，我们可以说这项研究已经达到了它的目的。

In recent years, networks without sharing the common media come into wide use. The SCAN, a sign of illegal accesses has become very difficult to detect for their crafty trick.In this research, we have proposed a distributed and cooperative manner to detect these SCANs successfully by dispersing the NIDSs on monitoring locations of networks. The simulation of using real networks data showed effectiveness of our proposed method. Comparing the traditional methods, the proposed method can detect SCANs in short time. Furthermore, the proposed method can restrain redundant control messages, so that only small amount of traffic between the manager and NIDSs are needed for managing the system. From these results, we can say this research has achieved its goal.