入侵检测集群中的动态自适应负载均衡算法

为了解决传统入侵检测系统无法应付高速网络的问题,提出了入侵检测群集的动态自适应负载均衡算法,该算法给每个节点设置了一个数据包接受区间,通过对网络报文的报头信息做哈希(Hash)运算,把数据包映射到某个节点的接受区间内;根据节点的处理能力和负载调节各个节点接受区间的宽度,从而合理分配各个节点上的网络流量,充分利用所有节点的计算资源。理论分析和实验结果表明,该算法在高带宽环境中有较高的效率。

Study of Dynamic Adaptive Load Balancing Algorithm in IDS Cluster

There is an emerging need for intrusion detection techniques that can keep up with the increasing network throughput.A novel algorithm of load balancing among IDS clusters was proposed to improve detection ability of IDS.The algorithm was adopted to hash the network packet header information in packet,to map the corresponding packet to scope of the nodes' number,and to adjust the scope according to the performance and load of each node.Theoretical analysis and experimental results demonstrate that the algor...