RESEARCH ON INTRUSION DETECTION RULES BASED ON XML IN DISTRIBUTED IDS

摘要：

This paper describes the design and research of intrusion detection rules in the distributed intrusion detection system which is based on agent. The hierarchical framework model based on intelligent agents is proved in the distribute intrusion system. The model involves three kinds of intelligent agents: A type agent, B type agent and C type agent which have different task. The definition and analysis of intrusion rules in the agent is discussed. This article also studies how to use the XML to design the system data and intrusion detection rules. The definition and transportation of four kings of data called XML protocol data, XML control information, XML intrusion detection rules and XML intrusion response in the agent is presented. The IAP and SSL are used to solve the safety of XML data transported between two agents in the system.

关键词： Intrusion rule Distributed intrusion detection system Intelligent agent XML

作者: WEN-TAO LIU

作者单位: Department of Computer and Information Engineering, Wuhan Polytechnic University, Wuhan Hubei 430023, China

会议类型: 国际会议

会议名称: 2008 International Conference on Machine Learning and Cybernetics(2008机器学习与控制论国际会议)

会议地点: 昆明

会议语种:英文

页码: 1400-1403

在线出版日期: 2008-07-12（万方平台首次上网日期，不代表论文的发表时间）