基于环形结构分布式协同入侵检测系统的架构

通过分析目前分布式入侵检测系统的特点和协作方式，提出了一种基于环形结构分布式协同入侵检测系统的体系结构；论述了在环形结构中事件发生器、事件分析器和事件响应器的结构，利用协议分析、数据分析、命令解析和协同处理器，使得在基于环形分布式协同入侵检测系统实现更方便；解决了目前分布式入侵检测系统中各系统结构复杂、负载不均衡等缺陷.

Framework of the Distributed Coordination Intrusion Detection Svstem Based on the Ring Structure

Through analyzing the characteristics and the cooperating mode of the present Distributed Intrusion Detection System (DIDS),this paper proposes a kind of architecture based on Ring Distributed Coordinated Intrusion Detection System （RDCIDS）.Furthermore,it expatiates on the event-generator,and event-analyzer,event-responder of the DIDS;adopts the protocol analysis,the data analysis,command interpreter and cooperate processor.It provides more convenience for the RDCIDS and overcomes the defects such as complicated structure and load imbalance in each subsystem of the present distributed intrusion detection system.