一种动态的入侵检测系统负载均衡算法  

Dynamic load balancing algorithm for IDS

作　　者：生慧[1] 张华忠[1] 徐成强[1] 

机构地区：[1]山东大学计算机科学与技术学院,山东济南250061

出　　处：《计算机工程与设计》2006年第23期4569-4571,共3页Computer Engineering and Design

摘　　要：目前的入侵检测不仅需要模式匹配,而且需要协议异常检测,提出了一种新动态的负载均衡算法。采用两层结构,对网络流量按照服务类型进行初步划分之后分别对每部分流量进行二次分配,并对每种类型的流量进行相应的协议异常检测。该算法能在不牺牲系统性能的前提下有效提高网络入侵检测系统的检测效率,降低误检率,并可有效地适应网络流量的变化,降低漏检率。Basing on the fact that intrusion detecting nowadays need not only pattern matching but also protocol anomaly detecting, a dynamic load balancing algorithm is proposed. This algorithm is characterized by its two level load-balancing structure. After the effectively classifying of network traffic according to service types, the second distributing and corresponding protocol anomaly detection is made to every part of the network traffic. This algorithm effectively enhance the nlDS detecting rate and reduce the false detecting rate, also suit the change of net traffic reducing the loss detecting rate.

关 键 词：入侵检测 协议异常检测 误检率 漏检率 负载均衡 散列 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]