期刊文献+

一种有效的并行入侵检测系统流量分配策略 被引量:2

Effective flow-distribution strategy in parallel IDS
在线阅读 下载PDF
导出
摘要 流量分配是影响并行入侵检测系统实时性的重要因素。首先提出了一种以局部时间内探测节点的负载平衡为目标,综合考虑探测节点的负载和处理能力的动态流量分配策略;然后通过引入负载平衡的粒度、益处估计,提出了一种动态负载平衡策略,达到了全局时间内探测节点的负载平衡;最后通过实验分析表明该策略是有效的。 flow-distribution is a factor influential to the efficiency of parallel IDS.First of all,this thesis propounds a comprehensive strategy based on the load and performance of the sensors,which aims to get the load-balance of sensors in a limited time. Then through the introduction of load-balancing granularity and benefits evaluation,a dynamic load-balancing strategy is presented, causing load-balance of sensors to IDS in a whole time.Finally,the efficiency of it can be showed through experiment.
出处 《计算机工程与应用》 CSCD 北大核心 2007年第24期152-154,共3页 Computer Engineering and Applications
基金 国家自然科学基金(the National Natural Science Foundation of China under Grant No.60373063 90612003)
关键词 入侵检测高速网络网络安全流量分配负载平衡 IDS high-speed network network-security flow-distribution load-balance
  • 相关文献

参考文献9

二级参考文献32

  • 1温钰洪,王鼎兴,郑纬民.异构机群系统中的最优处理机分配算法[J].计算机学报,1996,19(3):161-167. 被引量:8
  • 2[1]V Paxson. Bro: A system for detecting network intruders in real-time. USENIX Association, 1998, 1(1): 31~51
  • 3[2]K Huang, Z W Xu. Scalable Parallel Computing. Hongkong: China Machine Press, 2000
  • 4[3]D D Clark, S Shenker, L X Zhang. Supporting real-time applications in an integrated services packet network architecture and mechanism. Proc of ACM SIGCOMM, Baltimore, Maryland, USA, 1992
  • 5[4]A Demers, S Keshavt, S Shenker. Analysis and simulation of fair queuing algorithm. Proc of ACM SIGCOMM, Austin, TX, USA, 1989
  • 6[5]G Varghese, M Shreedar. Efficient fair queuing using deficit round robin. Proc of ACM SIGCOMM, Cambridge, MA, USA, 1995
  • 7[6]S Floyd, V Jacobson. Link-sharing and resource management models for packet network. IEEE/ACM Trans on Networking, 1995, 3(4): 365~386
  • 8[7]I Stoica, S Shenker, H Zhang. Core-stateless fair queuing: Achieving approximately fair bandwidth allocations in high speed networks. Computer Communication Review, 1998, 28(4): 118~130
  • 9[8]C Kruegel, F Valeur, G Vigna et al. Stateful intrusion detection for high-speed networks. In: Proc of the 2002 IEEE Symp on Security and Privacy. Los Alamitos, California: IEEE Computer Society Press, 2002. 285~294
  • 10[9]N F Puketza, K Zhang, M Chung et al. A methodology for testing intrusion detection systems. IEEE Trans on Software Engineering, 1996, 22(10): 719~729

共引文献142

同被引文献7

引证文献2

二级引证文献2

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部