| 一种混合式入侵检测系统的研究与设计 |
| |
| 引用本文： | 许占文,张锦,王鹤祥.一种混合式入侵检测系统的研究与设计[J].沈阳工业大学学报,2007,29(4):452-454. |
| |
| 作者姓名： | 许占文 张锦 王鹤祥 |
| |
| 作者单位： | 沈阳工业大学,信息科学与工程学院,沈阳,110023 |
| |
| 摘 要： | 简要介绍了入侵检测系统的定义与分类，分析了基于主机和基于网络两种入侵检测技术各自的优缺点，在此基础上提出了一种混合入侵检测系统模型，将模块化思想和多线程技术应用到系统的设计过程中，并详细介绍了系统各模块的组成、各线程的引入过程以及各线程的具体功能.其中，控制管理中心模块完成主要的业务逻辑，负责协调管理和统一调度系统其它各模块的工作，从而提高了系统的效率，使基于主机和基于网络的两种入侵检测技术得到了更加充分的融合.
|
| 关 键 词： | 混合入侵检测系统 多线程 聚类 系统调用序列 模块化 |
| 文章编号： | 1000-1646（2007）04-0452-03 |
| 修稿时间： | 2005-08-31 |
A kind of hybrid intrusion detection system |
| |
| XU Zhan-wen,ZHANG Jin,WANG He-xiang.A kind of hybrid intrusion detection system[J].Journal of Shenyang University of Technology,2007,29(4):452-454. |
| |
| Authors: | XU Zhan-wen ZHANG Jin WANG He-xiang |
| |
| Affiliation: | School of Information Science and Engineering, Shenyang University of Technology, Shenyang 110023, China |
| |
| Abstract: | Definition and classification of the intrusion detection system was introduced firstly,and then the advantage and disadvantage of the HIDS(host-based intrusion detection system) and NIDS(net-based intrusion detection system) were analyzed.A kind of hybrid intrusion detection system model combining NIDS with HIDS was proposed.Both modular thinking and thread technology were utilized during design process.The construction of the model and the concrete function of each thread were given.Among sub-models,the control-manage center sub-model is responsible for main business logic as well as in charge of managing and scheduling jobs of other sub-models.Efficiency of the system is improved,and two kinds of intrusion detection technologies mentioned above can perfectly syncretize in hybrid intrusion detection system. |
| |
| Keywords: | hybrid intrusion detection system multi-thread cluster system calling sequence modular |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《沈阳工业大学学报》浏览原始摘要信息 |
|
点击此处可从《沈阳工业大学学报》下载全文 |
