基于Super-Peer架构的分布式入侵检测模型研究

On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

随着大规模分布式入侵行为的日益增多,对分布式入侵检测系统的性能要求也越来越高。本文提出了一种基于Super-Peer架构并采用智能Agent技术的分布式入侵检测系统模型,将Super-Peer模型与分布式入侵检测系统有效地结合,克服了纯P2P模型可管理性差的缺点,提高了入侵检测系统的效率和协作检测能力,增强了系统的开放性,减少了层次化带来的瓶颈,从整体上提高了系统的性能。

As the distributed intrusion becomes serious, the performance demand for distributed intrusion detection systems will be more and more important. In this paper, the concept of the Super-Peer intrusion detection model （SPIDM） is proposed. Furthermore, the technology of intelligent agent is implemented in this model As a result, this efficient combination of distributed intrusion detection systems with the super-peer framework increases the system efficiency and collaboration, enhances the system openness, and thus improves the system performance as a whole