Applied model of active database system in IDS

To utilize the active function of database, it achieves an interface between the network layer and analysis layer, and improves the processing capability of IDS to near real-time intrusion detection. The paper describes the structure of active database systems functions, applies it in IDS, establishes two layers intrusion detection architecture, and some active functions are analyzed and enumerated at the end.