摘要： 设计了一种新颖的适用于高速网络的分层式动态负载均衡入侵检测系统模型及相应的动态流量均衡算法。该模型采用两级分流结构,由均衡代理与探测器根据均衡算法配合完成流量的动态均衡分配;动态均衡算法通过对数据包的特征域做散列运算,将其映射到某个探测器的接收区间内,并根据探测器的负载情况调节接收区间的宽度,合理分配各个探测器上的流量。性能分析和实验结果表明,该模型能够充分利用系统的计算资源,具有良好的动态流量均衡性能及高度的可扩展性,在高带宽环境中有较高的效率。

关键词: 高速网络, 入侵检测, 负载均衡

Abstract: There is an emerging need for intrusion detection techniques that can keep up with the increased network throughput. A novel hierarchymodel of intrusion detection is established, and a dynamic load-balancing algorithm is proposed to improve detection ability of intrusion detection.The model is characterized by its two level load-balancing structure, and balancing agents cooperate with sensors in completing load balancing; thealgorithm is adopted to hash the destination IP address in packet to map the corresponding packet to scope of the sensor’s number, and to adjust thescope according to the performance and load of each sensor. Performance analysis and experiments demonstrate that the model is scalable, and candispatch packets reasonably and utilize all the sensors’ sources effectively.

中图分类号: 

• TP393.08