Research And Implementation Of New Communication Protocols In IDS

In this paper, a new mechanism named "select father entity mechanism" is proposed based on the analysis and conclusion of the current communication and control mechanism in IDS, it uses route technology of TCP/IP protocol for reference. The new mechanism is used for DIDS mainly, looks CIDS as a special example, focuses on communication speed of IDS and IDS' self-safety, reduces false alerts rate and single point of failure questions, can detect cooperation and Dos intrusions at the same time. The new mechanism has two remarkable characteristics: First, high life-force. This is due to new mechanism's entity system, and the dynamic logic relation between entities. Second, lower load and higher speed. This is due to the new mechanism uses the State-Transition technology based on protocol analysis.This paper introduced four aspects: First, introduces the development of today's IDS and some communication and control mechanism in particular; Second, researches the entity based on DIDS' agent mechanism; Third, presents an mechanism named "select father entity mechanism" and discusses it in detail; Fourth, checked the new mechanism and analyses the result in experiment.