一种应用于DIDS的实时自调整归约算法

A Real Time Self-Adjusting Reduction Algorithm Applied to Distributed Intrusion Detection Systems

根据归约与分布处理的思路,设计了用于分布式入侵检测系统节点的实时自调整归约算法,并在Java环境中实现.在实验平台上验证了算法的正确性并证明其有效性.实时自调整归约算法能让使用者根据实际环境改变算法参数,使归约效果、警报响应实时性和系统性能能同时接近最优,为设计高效、稳定的入侵检测系统提供了一条捷径.

A real time self-adjusting reduction algorithm is provide, which is based on the notion of reduction and distributed processing. The algorithm is implemented in Java. Validity and effectivity of the algorithm has been testified on an experimental platform. As far as is known, in DIDS, reduction effect, real time performance of alert response and system performance cannot be optimal simultaneously. The algorithm is enabled to adjust in reduction effect and the system performance optimized by changing some parameters, and it is thus provided to present a new approach to the design of effective and stable intrusion detection systems.