摘要
一個盡責的系統管理者，其責任不但是必需維護主機或網路服務的順暢，更重要的任務是在於保證其所掌管的主機系統安全。不被其它攻擊者入侵，而成為殭屍網路(BOT NET)的一員。為達到此目的，相信一套能夠偵測網路服務是否正常，並在主機系統發生異常事件時能主動的告知管理者的多層次防護網管系統，將會是管理人員所迫切需要的。在本研究中，我們將整合開源碼資源，利用偵測封包的方式來確保網路服務是否正常，並建構主從式的主機LOG 收集機制，持續的收集各主機的主機LOG 並利用自行定義的樣式 （pattern）來進行比對，藉以找出主機系統的資安事件，在確認事件後，再以適當的方式通知管理者進行處理。
並列摘要
A conscientious system administrator whose responsibility of maintaining the hosts or web services. The more important task is to ensure the security of the hosts not intruded by the attackers and became one of the botnet. To achieve the goal， we believe that a multi-layered network management protection system which is able to detect whether the web services is abnormal or not and dynamic alert the administrator when anomalous events occurred will be urgently required for the managers. In our proposed research， we will integrate open source resources by using packet detection to make sure the web services operate normally and constructing log collection mechanism based on a client-server architecture. In order to identify the security incidents， we continuously collect logs from each host and apply self-defined patterns for comparison. After confirm the events， we will notify the administrator appropriately for processing then.