协同入侵检测研究现状与展望  

Research and prospect of collaborative intrusion detection system

作　　者：汪永好 李志成 田雨禾 董子超 Wang Yonghao;Li Zhicheng;Tian Yuhe;Dong Zichao(Dept.of Cyberspace Security,Beijing Electronic Science&Technology Institute,Beijing 100070,China)

机构地区：[1]北京电子科技学院网络空间安全系,北京100070

出　　处：《计算机应用研究》2023年第6期1614-1620,1647,共8页Application Research of Computers

摘　　要：协同入侵检测技术(collaborative intrusion detection system,CIDS)能够检测分布式协同攻击,应对大规模网络入侵,拥有传统入侵检测系统所不具备的优势,而如何在提高检测性能的同时实现去中心化是一个重要的研究课题。通过对近年来CIDS研究成果的梳理,阐述了在检测方法、数据聚合、隐私保护和信任管理方面的研究进展和问题,分析了在去中心化方面面临的挑战,探讨了基于区块链技术的CIDS未来发展方向,最后展望了CIDS在云计算、物联网等新兴领域的应用前景。Collaborative intrusion detection system(CIDS)can detect distributed cooperative attacks and deal with large-scale network intrusion.It has the advantages that traditional intrusion detection systems do not have.How to improve the detection performance while achieving decentralization is an important research topic.Through reviewing the research achievements of CIDS in recent years,this paper expounded the research progress and problems in detection methods,data aggregation,privacy protection and trust management,analyzed the challenges faced in decentralization,discussed the future development direction of CIDS based on blockchain technology.Finally this paper looked forward to the application prospects of CIDS in cloud computing,the Internet of Things and other emerging fields.

关 键 词：入侵检测 协同入侵检测 深度学习 联邦学习 区块链技术 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]