新型入侵检测机制  

A New Type of Intrusion Detection Mechanism

作　　者：汪鑫[1] 黄廷磊[1] 

机构地区：[1]桂林电子科技大学计算机与控制学院,桂林541004

出　　处：《计算机系统应用》2011年第5期65-68,91,共5页Computer Systems & Applications

基　　金：广西自然基金(桂科自0640169)

摘　　要：入侵检测作为一项重要计算机网络安全技术日益受到人们的重视,而现在的入侵检测技术还存在许多尚未解决的问题,如因为网络速度传输加快,网络流量大导致检测的实时性和有效性的降低,无法检测复杂多样的入侵行为等。研究设计出一种基于云计算框架下的新型入侵检测机制,该机制使用一种全局策略可弥补传统入侵检测系统的不足,并具有极大的可扩展性。People are paying more attention on Intrusion detection which is an important computer network security technolog.However there are still many unresolved issues in Intrusion Detection,for instance,the rapid speed of network transmission and network high traffic flow lead to real-time and effectiveness detection going down,and can not detect complex and diverse intrusion.We are developing a new intrusion detection mechanism based on cloud computing.This mechanism uses a global view which can make up for the deficiency of traditional intrusion detection,and proved to be great scalable.

关 键 词：入侵检测 网络安全技术 云计算 数据采集 数据分析 安全评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]