高速IP网络入侵检测系统的安全数据组织和管理(pdf6)(1)

IPIP•210096TheSecurityDataOrganizationandManagementofIDSoverHigh-SpeedIPNetworkChenHaoDingWeiDept.ofComputerScienceandEngineering,SoutheastUniversity,210096NanjingIPIDSAbstractThispaperisasummaryoftheresearchworkonsomeproblemsencounteredinthestorageandmanagementofsecuritydatathroughoutthedesignandimplementationofanintrusiondetectionsystemoverhigh-speedIPnetwork.Throughanalyzingthefeaturesandcharacteristicsoftheseproblems,thispaperhasexpoundedseveralpracticablestrategiesofimprovingtheperformanceofthedatastoragesubsystem,andhascarriedoutsomedetailanalysisofthesestrategiesbasedonourexperiments.Keywordsintrusiondetectionsystem(IDS),securitydata,datastorage,database1.IPTCP/IPIPIP1994••2002/6/19IP2.IPCernet500~10003.3.1IPIPNimdaNimdaIP3.23.3+yyyymmdd000000~2359593-4IPIDIPID4.4.1IPTCPSYNProxyHunterCPU4.2SQL15IP5.IPIP10GCPU186:1.200192.3.Sybase4.Sybase5.CiscoInc.IntrusionDetectionSystemDirectorforUNIXConfigurationandOperationsGuide,Version2.2.3