Abstract: This paper describes the design and implementation of co-operation intrusion detection system based on Snort and Acid (SADIDS). The control commands communicating between console and sensor are encoded with SADIDS command format. The adding or deleting rules are encrypted with Blowfish algorithm. This measure ensures the independence of the work and the most impossible safe co-operation among sensors. The independence and equilibrium of the system modules ensure the security of SADIDS system.

摘要： 提出一种基于Snort和Acid的分布式协同入侵检测系统(SADIDS),控制台和传感器之间传送的控制命令用SADIDS命令格式编码,添删的规则用Blowfish算法加密,使传感器之间的工作既具有独立性,并且通过远程配置,又可以使各个传感器之间安全地进行最大可能的分工协作,系统组件功能的独立均衡保证了自身的安全性。

关键词: 入侵检测, 协同, 分布式, 远程控制

CLC Number: 

• TP393.08