基于Jini的协同入侵检测模型  

Coordination intrusion detection model based on Jini

作　　者：申利民[1] 王红[1] 

机构地区：[1]燕山大学信息科学与工程学院,河北秦皇岛066004

出　　处：《计算机工程与设计》2012年第9期3301-3304,3336,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(60873008);河北省自然科学基金项目(F2011203234)

摘　　要：针对现有的分布式入侵检测系统存在检测准确性低、可扩展性差问题,提出一种具有动态可插拔的协同入侵检测模型。该模型主要由检测实体、行为库、协同控制器构成,采用代理技术和Jini技术实现,具有自管理、自修复和跨平台的特性,系统中的各代理可以即插即用,并且能与其它代理进行协同检测。实验结果表明,该模型提高了入侵检测系统的准确性和扩展性。According to low accuracy and poor scalability exists in present distributed intrusion detection system,the dynamic pluggable coordination intrusion detection model which consisted of detection entity,behavior library and coordination controller is proposed.The model with the properties of self-management,self-healing and cross-platform is implemented by agent and Jini.Each agent is dynamic pluggable and can carry on the coordination detection with other agents.Experimental results show that the model improves the accuracy and scalability of intrusion detection systems.

关 键 词：协同检测 行为 代理 JINI技术 动态可插拔 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]