企业级多层分布式入侵检测系统模型设计

Model Designing of Enterprise’s Multilayer Distributed NIDS

目前,随着我国企业级网络的迅速普及和发展,网络安全问题越来越突出。因此,如何选择或定制开发一套既安全、高效、灵活,又保证最低成本的网络安全产品也变得越来越困难。从适于简单的小型网络的单点嗅探设计入手,进一步完成适于中等规模的多层入侵检测防御体系设计,最后提出了适于企业级的分布式预警体系设计的安全模型,并对关键技术部分做了详细的说明。与昂贵的商业化安全产品相比,该模型虽然还有很多不足,但在成本、灵活性及实用性、易用性等方面却有明显的优势。

Today,with rapid development and popularity in our country,corporation Network’s security gets serious.It is more difficult to design or select one safe,efficient,neat but cheap network production.In this paper,single sensor NIDS suitable to the simple small network was designed first.Then,multilayer NIDS improved for moderate network was designed.Finally,multilayer distributed NIDS for enterprises was proposed with detail introduction to the key techniques.Compared with the safe but expensive business production,this model has great advantage in cheapness,flexibility,practicality and facility to use.