高速网络环境下入侵检测系统负载均衡的研究  

A Study of Load Balance of Intrusion Detection System in High-speed Networks

作　　者：汪秀元[1] 王恩波[1] 

机构地区：[1]北方工业大学计算中心,北京石景山100041

出　　处：《北方工业大学学报》2004年第1期17-20,24,共5页Journal of North China University of Technology

摘　　要：随着高速网络的快速发展 ,网络信息量的迅猛增长 ,入侵检测系统 (IDS)负载日益繁重 ,遗漏恶意数据 ,产生漏报现象不可避免 .如何使现有的入侵检测系统适应高速网络是一个全新的课题 .本文就此给出一种减轻IDS负载的办法 ,并结合分治与集群的思想 ,给出了一个IDS负载均衡方案 .With the rapid growth of high-speed networks, exponential increment of network information, and under increasingly heavy load conditions, the present intrusion detection system is unable to cope with the situation. How to make the existing IDS adapt to high-speed networks is a new task. This article gives some advice about alleviation of load, combining decentralization with cluster, and suggests a way to make IDS load balancing. The improved IDS can well match the high-speed networks.

关 键 词：高速网络环境 入侵检测系统 负载均衡 漏报现象 集群 分治 信息安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]