高速入侵检测中的负载均衡算法-IntrusionDetection.pdfVIP

A Load Balancing Algorithm for High Speed Intrusion Detection LU Sheng, GONG Jian, RUI Suying Department of Computer Science and Engineering, Southeast University, Nanjing, China Eastern China (North) Network Center of CERNET (210096) 86-25-3614718 {shlu, jgong, syrui}@ ABSTRACT instant ever than before. Meanwhile, deliberated Load balancing is applied to the development of attacks become more sophisticated and sneakier, network-based Intrusion Detection System (NIDS) to which makes the design of IDS more challenging. fit the performance problem caused by traffic in high Detecting algorithms have to be more complex and bandwidth network. Inspired from the concept of bit accurate, which would stay abreast of the emerging of entropy and bit flow entropy, a novel load-balancing network attacks. Therefore, the conflict between algorithm named Dimension-based Classification performance of NIDS and the arrived mass of packets Algorithm (DCA) is introduced in this paper. Based must be dealt with, which is obvious and exigent in on the contents of fields in IP packet header and some high bandwidth network. simple operations, this algorithm can keep the When processors’ performance does not meet relativities among packets in a high bandwidth the requirement, using clustered architecture for load network environment while distributing workload to