分布式入侵检测系统修复机制  

A Distributed Intrusion Detection System Repairing Mechanism

作　　者：杨挺[1] 罗光春[1] 

机构地区：[1]电子科技大学信息中心,成都610054

出　　处：《电子科技大学学报》2005年第5期634-637,共4页Journal of University of Electronic Science and Technology of China

摘　　要：提出了一种基于移动代理的新型分布式入侵检测系统的修复机制。该系统是针对WAN环境设计的,数据的处理通过各节点所设置的代理来进行分布式计算,能实现全网络范围内的入侵检测功能,具有良好的可移植性;对网络系统和主机的资源占用较低,减少出现网络瓶颈的可能。讨论了系统各个层次上的修复和抗毁功能,实验证明,该机制具有较好的性能。A mobile agent distributed intrusion detection system（MADIDS） repairing mechanism based on mobile agent is introduced in this paper. MADIDS is special designed for WAN environment. MADIDS Data is calculated by distributed agent at every node. Not only has it carried out a intrusion detection at network range and a well migrate character, but also there is possibility of lowering network bottleneck because of the low cost of network system and host computer resource. Restorability and Invulnerability at every layer of the system has discussed in this paper. Experiment proved that this mechanism is displaying a well performance.

关 键 词：多参数 入侵检测 决策 准确性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]