基于Super-Peer架构的分布式入侵检测模型研究

随着大规模分布式入侵行为的日益增多，对分布式入侵检测系统的性能要求也越来越高。本文提出了一种基于Super-Peer架构并采用智能Agent技术的分布式入侵检测系统模型，将Super-Peer模型与分布式入侵检测系统有效地结合，克服了纯P2P模型可管理性差的缺点，提高了入侵检测系统的效率和协作检测能力，增强了系统的开放性，减少了 层次化带来的瓶颈，从整体上提高了系统的性能。

On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

As the distributed intrusion becomes serious, the performance demand for distributed intrusion detection systems will be more and more important. In this paper, the concept of the Super-Peer intrusion detection model (SPIDM) is proposed. Furthermore, the technology of intelligent agent is implemented in this model. As a result, this efficient combination of distributed intrusion detection systems with the super-peer framework increases the system efficiency and collaboration, enhances the system openness, and thus improves the system performance as a whole.