基于分层的分布式入侵检测系统研究计算机系统结构专业论文.docxVIP

优秀毕业论文 精品参考文献资料 ABSTRACTABSTRACT ABSTRACT ABSTRACT：Intrusion Detection System is a network security insurance system that can take action after identifying suspicious behaviors of accessing to networks and hosts． It’S a very important means to insure network security．However,how to enhance efficiency of Intrusion Detection System becomes an urgent task just because it gets involved in many complex calculations and large number of monitoring data．Therefore， this paper studies a high-efficiency and layer-based Distributed Intrusion Detection System，taking the architecture of Intrusion Detection System as the entry point． According to its functions，this paper divides Distributed Intrusion Detection System into three layers：data collection layer,data analysis layer and decision-making control layer,aiming to seek for a method to enhance detection efficiency of Intrusion Detection System．The contents of this paper are 1isted as follows： For data collection layer,the paper analyzes sensor’S working principle，security problems and packets capturing technology,and designs its distributed allocation policy． Especially,it applies packet··analysic-based Load-Balance technology of IDS dataflow into this layer,and studies Load—Balance algorithm simultaneously． For data analysis layer,this paper designs the architecture of data analysis module and its distributed allocation policies，and analyzes the data detection process．Besides， an algorithm of String．Matching named BM algorithm is introduced into this layer．In order to resolve problems of tasks allocation，it also puts forward an algorithm named dynamic IDS tasks allocation algorithm based on resources occupation． For decision．making control layer,this paper studies its architecture and functions of each module． This paper also analyzes and designs the communication mechanism and cooperation mechanism of the layer-based Distributed Intrusion Detection System， including the communication between different layers or different