智能网格入侵检测系统

结合智能检测技术,并采用先进的分布式体系结构是当前入侵检测研究的一个主要方向.通过对网格与智能检测技术的深入研究,提出了一种智能网格入侵检测系统(intelligent grid intrusion detection system,简称GIDS).该系统部署于网格环境并采用基于神经网络的检测技术;为了实现各数据分析引擎的负载平衡,采用基于资源可用度的调度算法决定任务的分配;为了减少告警数量,采用基于乘性递增线性递减(multiplicative increase linear decrease,简称MILD)的动态窗口调整算法进行警报合成.该入侵检测系统不仅能够充分利用网格上的资源进行入侵行为的发现,而且实现了资源使用的负载均衡,在网络流量大的情况下能够获得较高的检测效率.最后介绍了相应的实验结果分析,表明了该系统的优越性.

An Intelligent Grid Intrusion Detection System

Adopt the advanced distributed system combined with intelligent intrusion detection technology is one of the key technologies to be applied in the intrusion detection system.Through the study on grid and intelligent intrusion detection technology,an intelligent Grid Intrusion Detection System(GIDS)is proposed which deploys in the grid environment and uses neural network detection technology.In order to realize the load balance between the detection engines,a scheduling strategy is used based on the resource performance value.In addition,Multiplicative Increase Linear Decrease(MILD)is applied to alerts aggregation.The GIDS,which fully exploits resources in the grid and realizes load balance,has high effectiveness in detecting the malicious attacks under heavy network traffic environment.Experimental results show that the performance of GIDS is good.