一种高性能分布式入侵检测系统的研究与实现.PDF

2004 8 Aug. 2004 27 4 Journal of Beijing University of Posts and Telecommunications Vol. 27 o. 4 　　: 1007-5321(2004) 04-0083-04 杨　武,　方滨兴,　云晓春,　张宏莉,　胡铭曾 ( , 150001) : , ( HDIDS) . , , HDIDS 3. 　　: ; ; ; : T P393. 08　　　: A - Research and Impl ementation of a High Performance Distributed Intrusion Detection System ,　 - ,　 - , YA G Wu FA G Bin xing YU Xiao chun ZHA G Hong-li,　HU Ming-zeng ( ational Computer Information Content Security Key Lab, Haerbin Institute of Technology, Haerbin 150001, China) Abstract: Theperformancebottleneck of the traditional network intrusion detection ( ) - system IDS is investigated in order to design and implement ahigh performance distributed intrusion detection system ( HDIDS) to detect network intruders by passively monitoring a network link. Experiments indicate that the data processing of our HDIDS is increased by about 3 times more than that of the traditional IDS. : ; ; Key words network security distributed intrusion detection performance optimizing protocol analysis; 　　 Internet,, . ( CMU) [1] IDS . ,( HDIDS) , . : 2003-09-25 : “863”( 2002AA142020) : 　( 1974— ) , , . E-mail: yangwu@ pact518. hit. edu. cn ( 1940- ) , , , . E-mail: fangbinxing@ pact518. hit. edu. cn 84 27　 1　HDIDS HDIDS 1(a), 2. HDIDS,. , , . , ;. [2] ,, ,. HDIDS, 1(