基于自律计算的主动入侵检测模型

ProactiveIntrusion Detection Model Based on Autonomic Computing

针对传统入侵检测系统的被动检测机制问题,借鉴自律计算思想,提出了一个具有自律特性的主动入侵检测模型.该模型以自主管理器为核心,在Agent协同层引入拍卖机制感知系统环境变化和管理调配被管资源,自主处理入侵信息,实现对入侵行为的主动响应.实验结果表明,通过合理的参数配置,该模型能有效提高入侵检测系统的自适应性和检测准确率.

Aiming at the defect of passive detection mechanism in traditional intrusion detection systems, a proactive intrusion detection model with autonomic characteristic is proposed in this paper. This model is based on autonomic manager and integrates multi-attribute Auction Mechanism into Agent coordination layer for perceiving the changing of the systems environment, adapting configuration management. Experimental results show that given an appropriate setting, the model can enhance the system~ s self-adaptive performance and obtain higher detection accuracy