基于智能信任关联的对等协同IDS仿真  

Simulation on Intelligent Trust Correlation P2P Collaborative IDS

作　　者：高永梅[1,2] 吴吉义[3,2] 张启飞[2] 

机构地区：[1]杭州职业技术学院,杭州310018 [2]浙江大学计算机科学与技术学院,杭州310027 [3]杭州师范大学电子商务与信息安全重点实验室,杭州310036

出　　处：《系统仿真学报》2009年第4期1168-1172,共5页Journal of System Simulation

基　　金：浙江省教育厅科研计划项目(20071371);国家863高技术研究发展计划资助项目(2006AA01Z431)

摘　　要：为了有效解决当前分布式入侵检测系统中存在的组件之间依赖程度大、负载不均衡、单点失效、系统不够健壮,以及入侵检测系统自身结构固定不能自动适应入侵变化等问题,提出了一种基于P2P思想的对等协同入侵检测系统模型,并进行了节点智能信任关联算法设计。基于P2P-CIDS模型和JXTA架构实现了一个对等协同IDS仿真系统原型,并借助Slapper蠕虫在仿真网络环境中进行了系统有效性评估。仿真结果表明,该对等协同IDS能明显提高脆弱网络节点的平均幸存率。In order to effectively solve the problem of the existing kinds of distributed intrusion detection system （IDS）, such as the excessive dependence between ID nodes, unbalanced load, single-point invalidation, inadequate robustness and unable to auto-adapt intrusion changes due to settled structure, before the design of nodes intelligent trust correlation arithmetic, a novel collaborative intrusion detection system was proposed based on P2P thinking. Based on P2P-CIDS model and JXTA framework, a collaborative intrusion detection system simulation prototype was implemented and its effectiveness was evaluated in preventing the spread of a real Intemet Slapper worm. The simulative data shows the P2P-CIDS significantly increases the overall survival rate of vulnerable peers in the network.

关 键 词：IDS 信任关联 对等协同 系统仿真 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]