基于组件的实时入侵检测虚拟实验室的设计与实现

Design and Implementation of Real-time IDS Virtual Lab Based on Component

提出了一种基于组件技术的入侵检测虚拟实验室系统的设计模型和实现方法。该系统采用Java语言实现,具有良好的平台无关性。以JavaBean组件技术对数据生成和入侵检测系统的感应器模块、分析器模块、统计显示模块、配置管理模块进行了开发,实现了软件重用和系统的可扩展性。系统客户端以JavaApplet实现,用户能够可视化地制定试验流程,指定模拟攻击流类型、配置过滤规则和检测规则以及选择试验结果的显示形式。整个实验过程中,用户能较直观深入的参与入侵检测系统的具体配置和操作,对于了解和掌握入侵检测系统的结构和主要原理大有帮助。

The design model and implementing method of lDS （Intrusion Detection System） virtual lab system were proposed based on component technique. This system was implemented with Java language, which could make the virtual lab system be independent of operating system. In the virtual lab, data generator module, inductor module, analyzer module, statistic and displaying module and management module of IDS were developed with Java Bean so that the system achieved software reuse and be scalable. The client of the system is implemented with Java Applet, and users can not only set down the process of experiment visually but also designate the type of simulation attaek flow, configure filtration rules and detection rules, choose display mode of experiment result. In the whole process of experiment, users participate in configuration and operation of IDS intuitively and this is helpful for the users to understand and master the structure and theory of IDS.