Task assigning mechanism for large-scale distributive invasion detecting system

Abstract

In large-scale high speed network, the invasion detecting system adopts always hierarchical distributive structure including dispersive acquisition, distributive processing and concentrated management. In the hierarchical modular structure, deputy technology is always adopted and the coordinating module in the coordinating management layer assigns and controls the deputies. In abnormal case that the static deputy in the lower layer can not settle, some request is sent to the coordinating module, and the coordinating module assigns movable deputy with specific function to the static deputy for complete the task before the cancel request is sent and the cancel command is sent separately to finish the assignment mechanism. The mechanism can balance the system load, respond timely, complete specific data processing function and make the movable deputy controllable.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to a method for real-time control of a mobile agent by a coordination module in a distributed large-scale intrusion detection system based on mobile agent technology. Background technique [0002] The wave of global informatization represented by the Internet is deepening day by day, the application of information network technology is becoming more and more popular and extensive, and the application level is deepening. The application field is gradually expanding from traditional and small business systems to large and key business systems. Typical such as Party and government department information system, financial business system, enterprise business system, etc. The development of an open, free and internationalized Internet has brought revolutionary reform and openness to government agencies, enterprises and institutions, enabling them to use the Internet to improve...

AI Technical Summary

Problems solved by technology

[0010] 2. Fast attack speed: After the attacker compromises multiple hosts, the scale of the attack increases exponentially, and the scale of the attack expands at a very high speed

[0011] 3. Large data traffic: When the compromised host sends out attacks at the same time, the amount of data in the network is very large, and even blocks the entire network

Images