一种支持异构Sensor的分布式IDS的通信机制  

A Practical Communication Mechanism for Heterogeneous Sensors in Distributed IDS

作　　者：郑庆华[1] 刘君杰[1] 范林涛[1] 

机构地区：[1]西安交通大学电子与信息工程学院,西安710049

出　　处：《计算机工程》2004年第16期116-118,共3页Computer Engineering

基　　金："十五""863"计划基金资助项目(2001AA140213)

摘　　要：提出了一种新的支持分布式入侵检测通信需求的通信机制。给出了通信机制的体系结构及其实现流程,提出了一种基于XML进行异构Sensor事件一致描述的方法,有效地解决了IDS之间数据共享的问题。针对IDS控制台和检测传感器之间安全数据交换的问题,提出了一种基于SSL和RSA算法相结合的安全通信解决方法。对本通信机制的性能进行了量化分析。A new kind of communication mechanism for distributed IDS is proposed. The paper gives the architecture and organization of the communication mechanism, proposes a universal descriptive method based on XML and IDMEF for different kinds of intrusion events so that it can solve the exchange problem in heterogeneous and distributed IDSs,a secure communication strategy based on SSL for the message exchange between sensor and console is also presented. The performance of the proposed communication mechanism is analyzed quantitatively.

关 键 词：入侵检测 入侵检测消息交换格式 安全套接层 XML 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]