基于本体模块接口的入侵防御系统研究  

Study on Intrusion Prevention System Based on Ontology Module Interface

作　　者：蒋宗华[1] 

机构地区：[1]安徽财经大学信息工程学院,蚌埠233041

出　　处：《计算机工程》2010年第17期152-154,共3页Computer Engineering

基　　金：安徽省高等学校省级自然科学研究基金资助项目(KJ2008B020)

摘　　要：建立一种新型分布式入侵防御模型并进行应用示例,该模型的知识库采用基于接口的模块化本体,防御方法采用上下文相关的策略。模块化本体能有效克服单一本体推理效率低、扩展性差等缺点,而在模块化本体中采用接口的方法有利于模块的独立进化和灵活配置。本体模块通过发送事件消息能够高效、及时地进行知识更新。A novel distributed intrusion prevention system model is presented and a use case scenario is given. The model uses interface-based modular ontology as knowledge base and context-depending policy as intrusion prevention method. As opposed to a monolithic approach, the modular ontology has advantages of good extensibility, high-efficient reasoning, etc. Moreover, ontology modules can be developed independently and configured flexibly through the notion of interfaces. By sending incident messages, ontology modules can update their knowledge more promptly and efficiently.

关 键 词：入侵防御系统 模块化本体 上下文相关策略 语义网规则语言 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]