云计算环境中的一种入侵检测模型分析

本文提出了一种云计算环境中的入侵检测模型,该模型中的每个云服务器都有自身的入侵检测系统,每一组集群服务器配备一台专用的入侵检测管理服务器进行管理,并负责报警信息的相互传递。采用了容忍入侵技术,减少漏报现象为整个系统的稳定性带来的影响。该模型可以有效的抵抗拒绝服务攻击,还能通过服务器之间的相互协作防止系统遭受单个失效节点的攻击,最大程度的保证云计算服务的安全性和流畅性,以提升用户体验。

Analysis on model of intrusion detection in Cloud Computing environment

The paper proposed a kind of model of intrusion detection in Cloud Computing environment. In this model, every cloud server had its own intrusion detection system. At the same time, a dedicated intrusion detection management sever was set for every group of severs to manage the intrusion detection systems and transfer alert information between the Cloud Computing severs. In addition, intrusion tolerance technology was used to reduce the effects of false negative for the entire stability of system. This model could effectively resist denial of service attack, and prevent the system from single point of failure attack, ensure the safety and fluency of Cloud Computing service in the greatest degree to provide better experience for users.