并行入侵检测系统的负载均衡算法  

Study of Parallel IDS Load Balancing Algorithm

作　　者：孙钦东[1] 张德运[1] 高鹏[1] 张晓[1] 

机构地区：[1]西安交通大学网络研究所,陕西西安710049

出　　处：《小型微型计算机系统》2004年第12期2215-2217,共3页Journal of Chinese Computer Systems

基　　金：国家信息化计算机网络与信息安全基金 ( 2 0 0 1-研 1-0 10 )资助

摘　　要：提出了并行入侵检测系统 (IDS)的负载均衡算法 ,该算法给每个 IDS探测器设置了一个数据包接受区间 ,通过对数据包的目的 IP地址做散列 (Hash)运算 ,把数据包映射到某个探测器的接受区间内 ;根据探测器的处理能力和负载调节各个探测器接受区间的宽度 ,从而合理分配各个探测器上的网络流量 ,充分利用所有探测器的计算资源 .理论分析和实验结果表明 。There is an emerging need for intrusion detection techniques that can keep up with the increased network throughput. A novel algorithm of load balancing among parallel IDS sensors was proposed to improve detection ability of IDS. The algorithm was adopted to hash the destination IP address in packet, to map the corresponding packet to scope of the sensors number, and to adjust the scope according to the performance and load of each sensor. Theoretic analysis and experimental results demonstrate that the algorithm can dispatch packets reasonably and utilize all the sensors sources effectively.

关 键 词：网络安全 入侵检测系统 负载均衡 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]