基于动态负载均衡的分层式高速网络入侵检测模型  

A Hierarchy Model of Intrusion Detection for High-speed Network Based on Dynamic Load Balancing

作　　者：孙钦东[1] 张德运[2] 高鹏[2] 刘刚[2] 

机构地区：[1]西安理工大学计算机科学与工程学院,西安710048 [2]西安交通大学网络研究所,西安710049

出　　处：《计算机工程》2005年第12期13-14,231,共3页Computer Engineering

基　　金：国家信息化计算机网络与信息安全基金资助项目(2001-研1-010)

摘　　要：设计了一种新颖的适用于高速网络的分层式动态负载均衡入侵检测系统模型及相应的动态流量均衡算法。该模型采用两级分流结构,由均衡代理与探测器根据均衡算法配合完成流量的动态均衡分配;动态均衡算法通过对数据包的特征域做散列运算,将其映射到某个探测器的接收区间内,并根据探测器的负载情况调节接收区间的宽度,合理分配各个探测器上的流量。性能分析和实验结果表明,该模型能够充分利用系统的计算资源,具有良好的动态流量均衡性能及高度的可扩展性,在高带宽环境中有较高的效率。There is an emerging need for intrusion detection techniques that can keep up with the increased network throughput. A novel hierarchymodel of intrusion detection is established, and a dynamic load-balancing algorithm is proposed to improve detection ability of intrusion detection.The model is characterized by its two level load-balancing structure, and balancing agents cooperate with sensors in completing load balancing; thealgorithm is adopted to hash the destination IP address in packet to map the corresponding packet to scope of the sensor’s number, and to adjust thescope according to the performance and load of each sensor. Performance analysis and experiments demonstrate that the model is scalable, and candispatch packets reasonably and utilize all the sensors’ sources effectively.

关 键 词：高速网络 入侵检测 负载均衡 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]