Research And Implementation Of A CORBA-based Distributed Intrusion Detection System

With the rapid extension of internet and wide application of Internet, network security, especially network intrusion, has become very serious. Therefore, it is quite necessary for us to thoroughly analyze problems in network security, such as intrusion attack, to study intrusion detection technology, and also to develop effective network intrusion detection systems (NIDS). Our research work is valuable and important for the development and application of network information systems.After investigating and analyzing technologies on Distributed Instruction Detection System (DIDS), we propose a CORBA based DIDS model, of which its functionality, architecture, and components are deeply discussed. Emphasis of the thesis is put on techniques and feasible methods which combine NIDS and distributed computing technology, such as CORBA, to support large-scale DIDS development.The work of our research can be divided into four parts:? Analyze the drawbacks of current network security model, and discuss the way to solve these problems, what's more, we also analysis the problem of Objecct Security in CORBA and its solution.? Analyze the traditional intrusion detection model, and then explore problems in current intrusion detection systems, and discuss the main technology of IDS development.? Propose a CORBA-based DIDS model.? Based on our model, we design and implement a DIDS, called as CDIDS(CORBA-based Distributed Intrusion Detection System), and discuss key problems and solutions in CDIDS development.CDIDS has good features, for example, its open architecture, independence of platform, scalability and flexibility. In large-scale and complex network environment it has promising future.