一种分布式路由器的监视技术

针对网络节点路由器已经成为网络入侵者主要攻击目标之一的情况,分析了目前分布式路由器的入侵检测技术的现状及其局限性,提出了一种新的分布式路由器的入侵检测技术即"监视技术",监视技术的目的就是识别破坏性路由器(定义破坏性路由器为丢弃或误传数据包,以及不支持监视技术协议的路由器)。并详细地介绍了该技术的实现思想,即监视技术要求每个路由器配备能够统计正确传输事件和误传事件的计数器,然后,通过确定算法和流守恒算法将破坏性路由器识别并隔离出来。该技术的采用提高了对以路由器为对象的入侵行为检测的准确性和有效性,更好地保证了网络的安全性。

Watchers Technique in a Distributed Network System

Pointing to the case that routers become one of intruder's main targets, the actuality and limitation of the intrusion detection technology of distributed router was analyzed and a new one called "watchers" is put forward that can be used to recognize the devastating routers (it was defined as routers of throwing away or misrepresenting data packages and not supporting watchers protocol). Its core techniques are introduced in detail, namely all routers are required to fit out counter of counting correct and misrepresenting transferred events, and then devastating routers are recognized and insulated by confirming algorithm and stream conservation algorithm. The application of the technique could improve the veracity and validity of intrusion detection technology of distributed router and the safety of networks could be better assured as well.