分布式入侵检测系统数据概化和探查  

Data generalization and exploration of distributed Intrusion Detection System

作　　者：李静[1] 黄松[1] 

机构地区：[1]重庆教育学院计算机与现代教育技术系,重庆400067

出　　处：《重庆教育学院学报》2006年第6期54-56,共3页Journal of Chongqing College of Education

摘　　要：为适应高速网络的发展,入侵检测系统从传统架构向分布式架构的转换势在必行。本文分析构建了一个分布式入侵检测系统框架模型,提出用数据概化的方法将大量松散数据内聚,来评估计算机网络的安全,并用数据探查的方法追踪在概化数据中显示的不安全因素。使用数据概化和探查可以提高控制中心的处理效率。In order to accord with the development of high-speed network, it is necessary that the traditional Intrusion Detection System （IDS） be changed into distributed framework. This paper analyzed and constructed a distributed IDS frame model and held that data generalization method could be used to combine numerous heterogeneous data into a coherent process to evaluate the security of cyberspace. It used data detection method to trace unsafe factors which were shown in generalized data. It also pointed out that using data generalization and detection could improve management efficiency of control centers.

关 键 词：分布式 IDS 数据概化 数据探查 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]