【摘要】 分布式入侵检测系统已经成为当今入侵检测领域的发展趋势和研究热点。通过对当前国内外出现的分布式入侵检测系统的深入研究,总结出分布式入侵检测系统的六类通用组件:采集器、分析器、协调器、管理器、响应器、用户界面;并提出了三个重要视点:管理视点、分析视点和协调视点。这在国内尚属首次。为了更详细阐明三个视点的涵义,笔者分别从这三个视点出发对国内外现有的各种分布式协同入侵检测系统进行了分类,并对几种典型入侵检测系统的体系结构、技术特点以及各自的优势与不足进行了深入分析;最后提出在大规模网络环境下分布式入侵检测系统所应该具备的一些功能特点;并且对该领域的一些发展方向与趋势进行了探讨。更多还原

【Abstract】 Recently the Distributed Intrusion Detection System(DIDS)has become a hotspot in the research field of se-curity.After studying for a long time ,we make a conclusion that the DIDSs are always made up of six parts:Collector,Analyzer,Coordinator,Manager,Responsor and UI.And also,three new viewpoints are suggested to analyze DIDS:Manager View,Analyzer View and Coordinator View.Many kinds of the up-to-date cooperative DIDSs are classified and analyzed from these viewpoints.Finally some characteristics and several possible trends of DIDS in large-scale networks are dis-cussed.更多还原