关于无线网络中分布式入侵检测系统的混合体系架构研究  

Research On Hybrid Architecture for Distributed Intrusion Detection System in Wireless Network

作　　者：李焕[1] LI Huan(Xianyang Vocational Technical College,Xianyang 712000 China)

机构地区：[1]咸阳职业技术学院,陕西咸阳712000

出　　处：《自动化技术与应用》2018年第5期52-55,60,共5页Techniques of Automation and Applications

摘　　要：网络应用的快速增长,新型网络攻击层出不穷。因此,保护网络免受攻击和入侵检测技术的普及是至关重要的。因此,有必要从网络设计和部署开始就阐明这个安全问题。入侵检测技术是识别网络活动的过程,可以导致安全策略的妥协。在入侵侦测已经做了大量的工作,但解决方案并不令人满意。在本文中,我们提出了一种新的分布式入侵检测系统使用多代理,以减少误报和管理误用和异常检测。With the rapid growth of the network application, new kinds of network attacks are emerging endlessly. So it is critical for the protection of networks from attacks and the popularity of intrusion detection technology. Therefore, it is necessary that this security concern must be articulate right from the beginning of the network design and deployment. The intrusion detection technology is the process of identifying network activity that can lead to a compromise of security policy. Lot of work has been done in detection of intruders. But the solutions are not satisfactory. In this paper, we propose a novel distributed intrusion detection system using multi agent, which can decrease false alarms and manage misuse and anomaly detects.

关 键 词：入侵监测 体系结构 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]