The Study Of Virtual Organization_based Grid Intrusion Detection System

As the third-time tide of Internet, grid would provide next generation distributed applications and services. Grid computing has already become a hotspot, and the low cost, the high performance and the convenient computing resources sharing brought by it are exactly what numerous business enterprises pursues. Grid communicates by the Internet, but Internet is a public network which is very on-limits and isomerism, so the grid tasks running on the Internet will face various safe threat of each kind, such as intercepting the data, distorting or deleting the contents of information, counterfeiting the legal customer and server etc.. Therefore valid security measures need to be adopted in the grid environment, insure a system safety.Intrusion Detection System is the foundation that sets up the dynamic defense and the analysis later, the safety dynamic defense model of the modern information system also makes the Intrusion Detection System as one of the three information system safety pillars. Although this application is very important in the field of the network security, there are not any successful products which work on the grid. The main reason is that grid is an isomerism environment and there are so many users and resources which belong to many organizations. Secondly, during the running the grid task can apply or start the process dynamically and apply or release the resources dynamically. Moreover the resources are distributed over many locations which have different structures and protocols. Through the study on grid function model; this paper proposes a new Grid-based Intrusion Detection System Model.Through the study on grid, this paper first proposes that the essential unit on the grid is the virtual organization. The object detected by the Grid-based Intrusion Detection System (GIDS) is VO, and GIDS itself is also VO. Through the study on VO, Intrusion Detection System (IDS), ASP and Grid Service, a Virtual Organization-based Grid Intrusion Detection System (VOGIDS) is proposed. During the implement of the service, we disassemble the task by the flow of the Intrusion Detection and match the task with the role, and then assign the task to the grid resource. The grid resource make up of the VOGIDS by the negotiation on the role. This paper solves the problem of the selection and the dispatch of the resource from many references to the evaluation of the grid service and the shortcut selection algorithm.