摘要
提出在分布式系统中的一种新的入侵检测方法和安全策略架构。该解决方案能够保证安全策略的一致性,有效阻止对本地策略的偶然或恶意更改。方案采用两层入侵检测机制保证分布式策略的完整性和一致性,在容错性和应对DoS攻击方面具有良好的表现。该方法能够提高大规模系统的安全性。
This paper presents a novel intrusion detection approach and infrastructure to enforce the security within a distributed system. The solution guaranties the consistency of the security policy and prevents any accidental or malicious update efficiently. Two levels of intrusion detection are proposed to guaranty the integrity and the consistency of the distributed policy. The solution is more robust in terms of fauh-tolerance and resists to denial of service attacks. This approach enforces the security of large scale systems.
出处
《计算机与现代化》
2009年第5期96-98,共3页
Computer and Modernization
关键词
分布式环境
安全策略
入侵检测
distributes environment
security policy
intrusion detection