Abstract: In order to resolve the problem that current scanning detection algorithms can not recognize hidden scanning and slow scanning, a scanning detection algorithm based on finite machine of protocol status is proposed. It can more exactly detect common scanni

Key words: Intrusion detection, System scanning detection, Finite machine of protocol status