高速网络下入侵检测系统设计

The Design of Intrusion Detection System for High-Speed Network

高速网络下如何进行入侵检测分析是当前网络安全研究的一个重要方向,该文基于动态负载和系统底层设计,通过嵌入底层内核代码,动态分发检测数据流,进行高速检测。该设计方法能够直接融入现有的分布式入侵检测系统或产品中,并且具有动态可扩展性、对入侵检测系统透明等优点。实测分析表明该方法能够在高速网中进行有效测试。

As the networks be co me faster there is an emerging need security analysis in high-speed network.T he practice testifies that a single computer can't afford to detect packet in th e high network.A new partitioning approach to network security analysis is prop osed,that embeds kernel code and partitions the data flow based on dynamic load balance and design in system bottom.This approach can embed existent intrusio n detection system or product.The experiment approves this way's effectiveness .