基于信息融合技术的附网存储安全体系  

Security framework of network-attached storage based on information fusion

作　　者：耿立中[1] 贾惠波[1] 

机构地区：[1]清华大学精密测试技术及仪器国家重点实验室,北京100084

出　　处：《清华大学学报（自然科学版）》2011年第4期452-456,461,共6页Journal of Tsinghua University(Science and Technology)

摘　　要：为了提高附网存储安全体系的效率,系统分析了附网存储平台上入侵检测技术学习瓶颈的形成机制,发现学习成本随着"知识"的增加呈指数增长,学习瓶颈的存在严重制约了附网存储入侵检测系统的功效。对此提出了一种基于信息融合技术的附网存储安全体系,利用D-S证据理论融合了两种不同的入侵检测技术,包括基于主机系统调用的入侵检测和基于存储的入侵检测技术。实验结果表明:该安全体系可以更加有效地防范入侵行为,总体检测性能提高了约15%。The bottleneck formation of intrusion detection leaning in the network-attached storage（NAS） application was analyzed to increase the NAS security framework efficiency and show that the learning cost of intrusion detection methods shows exponential growth with increasing knowledge and the bottleneck seriously restricts the detection performance,which can be solved using information fusion technologies.A NAS security framework was then designed and implemented by fusing two different intrusion detection methods,the storage based intrusion detection method and the system call based intrusion detection method.The experimental results demonstrate that the framework can more effectively retard intrusion with the overall detection capability increasing by 15%.

关 键 词：信息融合 入侵检测 附网存储 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]