Research And Implementation Of Cooperative Communication Key Technologies In Distributed Intrusion Detection System

The technology of distributed intrusion detection is one of initiative guard network security technologies, The cooperative communication mechanism which is an important part of distributed intrusion detection system is current research hotspot.In the research and development of this paper,Author analyzed present research situation of DIDS,and proposed one model of DIDS based proxy technology, and designed and realized one cooperative communication mechanism of DIDS as follow:(1)Designed a dynamical load balance algorithm for dynamic assign loading between data acquisition proxy and data detect proxy;(2)In order to achieve information sharing and mutual cooperation of DIDS, this paper provided a Intrusion Detected Common Communication Data Model(IDCCDM) by using object-oriented principle of design and the normalized way;(3)This paper proposed the Intrusion Detection Common Message Exhange Frame(IDCMEF) based on XML language to describe IDCCDM with formalization.(4)In order to solve the safe transparent communication for sensitive data exchange of intrusion detection,this paper designed a Intrusion Detection Common Exchange Protocol (IDCEP) based on BEEP application layer through profile negotiatement and saft tunnel mechanism.This paper introduced above author's research and development work,and detailed principle of work,analysis process and realization method of key technologies of cooperative communication in distributed intrusion detection system.