Data merging mechanism for large distributive intrusion inspecting system

Abstract

The present invention is a real time warning merging system for a large scale distributive type of invasion detecting system. In a large scale high speed network, the invasion detecting system generally adopts the stratified distributive type of structure, which can meet the requirements of a large scale high speed network through the dispersive collection, the distributive process and the concentrative administration. In a large scale network there can be disposed a plurality of invasion detecting systems, each of which covers a part of the network, and other safety members such as fire wall and like. In order to obtain a global aeroview of invasion, all of these safety members must operate in coordination with each other.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to a real-time fusion method of alarms in a large-scale distributed intrusion detection system. Background technique [0002] The wave of global informatization represented by the Internet is deepening day by day, the application of information network technology is becoming more and more popular and extensive, and the application level is deepening. The application field is gradually expanding from traditional and small business systems to large and key business systems. Typical such as Party and government department information system, financial business system, enterprise business system, etc. With the popularization of the network, security has increasingly become an important issue that affects network performance. The openness, internationality and freedom of the Internet increase the degree of freedom of application and put forward higher requirements for security...

AI Technical Summary

Problems solved by technology

[0008] With the continuous expansion of the network scale, the network attack methods are also constantly developing. For example, the distributed denial of service attack has caused huge economic losses and is difficult to prevent with the current technical means. At this time, the intrusion detection system based on the host and small-scale network It shows its limitations, and the application of intrusion detection system to large-scale high-speed network has become a new foothold of intrusion detection system research

Images