基于策略的分布式入侵检测系统的动态配置

Policy-based Configuration of Distributed IDS

在分布式入侵检测系统中,随着使用的传感器数量的增加,手工配置组件的复杂度和费用也在不断提高,为解决这一问题,提出了一种基于策略的IDS组件配置方法,该方法使用了来自资源管理数据库和自学习传感器的额外信息,简化了策略设计,实现了分布式入侵检测系统的动态重配置。

In distributed IDS,with the number of the de- ployed sensors the complexity and cost of manual con- figuration of the components increase as well.To settle this question,this paper proposes a policy-based meth- od for the configuration of the IDS components.The method makes use of additional information which is col- lected from an asset management database(and maybe from the IDS sensors themselves).The process makes the design of policy easy and implements auto configura- tion of the distributed IDS.