云计算入侵检测数据融合技术

Data Fusion of Intrusion Detection in Cloud Computing

入侵检测是最常用的一种网络安全技术,云计算环境对入侵检测系统提出了新的要求。针对分布式入侵检测系统中来自不同类型入侵检测系统的数据需要融合处理的问题,本文探讨入侵检测数据融合模型的设计与实现问题,提出通过对不同类型的入侵检测数据进行融合后再经过多级提炼,产生多抽象级情景描述,最终能产生更为准确的入侵检测评估结果。

Intrusion detection is a common network security technology,cloud computing proposes new requirements to intrusion detection system（IDS）.In distributed intrusion detection system,there are many different types of IDSs,and data fusion enables the combination of the output of different types of IDSs.The design and achievement of data fusion process model are discussed.By making inferences from the combined data,a multiple level-of-abstraction situational description is emerged,and an analysis of the threat of the current situation is presented.