一种基于UML的协同入侵检测系统分析方法

钱德沛; 张然; 白跃彬

一种基于UML的协同入侵检测系统分析方法

1.
北京航空航天大学计算机学院, 北京 100083
2. 西安交通大学计算机科学与技术系,西安 710049

基金项目: 国家973重点基础研究资助项目(G1999032710);国家自然科学基金资助项目(90104022)

详细信息

作者简介:
钱德沛(1952-),男,上海人,教授, depeiq@263.net.

中图分类号: TP 393.08
计量
- 文章访问数: 3339
- HTML全文浏览量: 206
- PDF下载量: 854
- 被引次数: 0
出版历程
- 收稿日期: 2003-06-02
- 网络出版日期: 2004-09-30

UML-based analysis method for collaborative intrusion detection system

1.
School of Computer Science and Technology, Beijing University of Aeronautics and Astronautics, Beijing 100083, China
2. Department of Computer Science and Technology, Xi'an Jiaotong University, Xi'an 710049, China

摘要

摘要: 为了提高对分布式协同攻击的检测能力,提出了一种具有广泛适用性的分布式协同入侵检测模型,该模型以多代理为构造基础,通过协调代理协同下层检测代理,实现对复杂攻击的协同检测.采用统一建模语言(UML),对模型的主要功能、静态组织结构、代理内部的推理行为和代理间的交互行为进行了分析和设计.UML为协同入侵检测系统的分析和设计提供了有效的手段,方便了与其它安全系统的集成.
- 安全 /
- 协调 /
- 检测 /
- 协同攻击 /
- 代理 /
- 统一建模语言
Abstract: To enhance the capability of detecting distributed attacks, a general model of distributed collaborative intrusion detection was proposed, which is based on multi-agent. It achieves detection of complex attacks through coordinating the lower-level agents using coordination agents. Unified modeling language (UML) was employed to analyze and design the main functions and the static structure of the model, the inner reasoning behavior of agents and the cooperating behavior among agents. UML provides an effective means for the analysis and design of collaborative intrusion detection system, which facilitates its integration with other security systems.
- safety /
- coordination /
- measuring /
- coordinated attack /
- agent /
- unified modeling language

HTML全文

参考文献(1)

[1] 刘超, 张莉. 可视化面向对象建模技术——标准建模语言UML教程[M]. 北京:北京航空航天大学出版社, 1999 Liu Chao, Zhang Li. Visual object-oriented modeling technology—course of standard modeling language UML[M]. Beijing:Beijing University of Aeronautics and Astronautics Press,1999(in Chinese) [2] Zhang Ran, Qian Depei, Bao Chongming, et al. Multi-agent based intrusion detection architecture . 2001 International Conference on Computer Networks and Mobile Computing . New York:IEEE Press, 2001. 494~501

施引文献

资源附件(0)

访问统计