高速网络环境下的网络入侵检测系统

基于数据过滤与负载均衡技术,提出了一个能应用在高速环境下的网络入侵检测系统,给出了一个综合考虑实时负载、可用性及能力的负载均衡算法,即基于应用的最小负载优先算法;采用分布式的网络入侵检测系统的结构,基于MobileAgent技术来实现分析检测代码的动态更新与移动·实验测试表明该系统能较好地解决高速网络环境下的实时入侵检测问题

Research on Network Intrusion Detection System for High-speed Network

A network intrusion detection system (NIDS) based on data filter and load balance was described. The system can be applied to the high speed network environment. A load balance algorithm called application based least load first was presented. The algorithm considers the availability and load of analysis hosts. The network intrusion detection module was designed according to the framework of distributed network intrusion detection system, and the technique of mobile agent was used to implement the mobility and dynamic update of intrusion detection code. The system may solve the problem of real time online detection of network intrusion for high speed networks.