一种具有组件冗余机制的改进CIDF模型  

An Improved CIDF Model with Component Redundancy

作　　者：马震远[1] 罗伟其[1] 姚国祥[1] 吕双欢[1] 

机构地区：[1]暨南大学网络中心,广东广州510632

出　　处：《计算机工程与科学》2005年第5期25-28,共4页Computer Engineering & Science

基　　金：广东省自然科学基金重点资助项目(0104521)

摘　　要：本文分析了基于CIDF模型实现的DIDS自身存在的安全问题,提出了一种基于组件冗余思想的改进CIDF模型。该模型很好地克服了DIDS的单点失效性。通过一种设计巧妙的组件状态检测方法,克服了以往状态检测方法开销大的缺点。利用该方法实现了DIDS组件在受到攻击瘫痪后自动切换到备用组件,从而大大提高了DIDS自身的安全性。This paper analyzes the security of DIDS based on the CIDF model, and then proposes an improved component-redundancy-based CIDF model. This model resolves the single-point failure problem in DIDS. We have designed a component status detection method, which overcomes the shortcomings of high overhead of the traditional method Then we use this method to make the system automatically switch to the backup components, when it callapses after being attacked. So the security of DIDS is enhanced

关 键 词：计算机网络 网络安全 分布式入侵检测系统 防火墙 组件冗余机制 CIDF模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]