网络入侵检测系统中动态负载平衡策略的设计

Design of Dynamic Load-Balancing Strategy in Network-based Intrusion Detection System

随着互联网的广泛应用,网络信息量迅猛增长,网络攻击数量和方式大大增加,网络入侵检测系统需要部署多个感知器(Sensor)时网络监测和保护,通过增加Sensor,可以增强系统分析检测能力。然而,为了充分利用系统处理能力,需要动态分配处理节点任务,实现动态负载平衡。该文在分析网络入侵检测系统的基础上,提出负载值计算方法,结合通用负载平衡策略,提出了分布式入侵检测系统的动态负载平衡策略,实现了良好的动态负载平衡效果,提高了系统性能。

With the widely using of Internet and rapid increase of network traffic,network attacks increase greatly.Net-work-based Intrusion Detection System (NIDS)needs to deploy multi sensor to monitor and protect network,and with adding sensor we can promote the detection capability of NIDS.Nevertheless in order to make the best use of the capability we need dynamic task assignment to balance the load of different processing node at runtime.In this article based on the analysis of NIDS,the authors define the load value calculation method of NIDS,and combining with common load-balancing strategies they propose a dynamic load balancing strategy for NIDS,which implements dynamic load balancing well and promote the performance of NIDS.