计算机工程与应用 ›› 2007, Vol. 43 ›› Issue (24): 152-154.

• 网络、通信与安全 • 上一篇    下一篇

一种有效的并行入侵检测系统流量分配策略

邢长明,刘方爱,杨 林   

  1. 山东师范大学 信息科学与工程学院,济南 250014
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2007-08-21 发布日期:2007-08-21
  • 通讯作者: 邢长明

Effective flow-distribution strategy in parallel IDS

XING Chang-ming,LIU Fang-ai,YANG Lin   

  1. Information Science and Technology College,Shandong Normal University,Jinan 250014,China
  • Received:1900-01-01 Revised:1900-01-01 Online:2007-08-21 Published:2007-08-21
  • Contact: XING Chang-ming

摘要: 流量分配是影响并行入侵检测系统实时性的重要因素。首先提出了一种以局部时间内探测节点的负载平衡为目标,综合考虑探测节点的负载和处理能力的动态流量分配策略;然后通过引入负载平衡的粒度、益处估计,提出了一种动态负载平衡策略,达到了全局时间内探测节点的负载平衡;最后通过实验分析表明该策略是有效的。

关键词: 入侵检测, 高速网络, 网络安全, 流量分配, 负载平衡

Abstract: flow-distribution is a factor influential to the efficiency of parallel IDS.First of all,this thesis propounds a comprehensive strategy based on the load and performance of the sensors,which aims to get the load-balance of sensors in a limited time.Then through the introduction of load-balancing granularity and benefits evaluation,a dynamic load-balancing strategy is presented,causing load-balance of sensors to IDS in a whole time.Finally,the efficiency of it can be showed through experiment.

Key words: IDS, high-speed network, network-security, flow-distribution, load-balance