基于簇的移动自组网的IDMEF数据模型设计  

Design of Data Model Intrusion of Detection Message Exchange Format in Wireless Ad Hoc Networks Based on Clusters

作　　者：胡波 

机构地区：[1]福建省财政信息中心,福建福州350003

出　　处：《计算机技术与发展》2016年第8期93-97,共5页Computer Technology and Development

基　　金：国家自然科学基金资助项目(60773013)

摘　　要：IDWG提出的IDMEF数据模型是基于有线网络的入侵检测而设计提出的,而移动自组网具有网络自组性、拓扑结构高度动态、传输带宽有限、移动节点局限性、多跳路由通信、分布式控制等独特特征,其安全性特别脆弱,加上文中欲设计基于簇的移动自组网入侵检测系统,导致该系统无法使用IDWG提出的IDMEF数据模型。因此,在综合考虑上述因素和参照原IDMEF数据模型的基础上,文中提出和设计了一种新的基于簇的移动自组网的IDMEF数据模型,并对其进行了详述。该模型能很好地适应移动自组网和本移动自组网入侵检测系统的需求。The data model of Intrusion Detection Message Exchange Format （IDMEF） is put forward by IDWG which is designed in view of the cable network intrusion detection. Mobile ad-hoc network with network configuration, highly dynamic topology,limited trans- mission bandwidth, limitation of mobile node and multiple hops routing communication, distributed control and so on, its safety is particu- larly vulnerable, and it tries to design a mobile ad-hoc network intrusion detection system based on cluster in this paper, which leads to the system can＇ t use IDMEF data model. Therefore,in consideration of the above factors and on the basis of reference of the original ID- MEF data model, a new IDMEF data model of mobile ad-hoc network based on cluster is put forward, and it is described in detail. The model can be a very good to adapt to the system requirements of mobile ad-hoc network and proposed one.

关 键 词：入侵检测 入侵检测信息交换格式 入侵检测交换格式工作组 移动自组网 簇 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]