Research Of CORBA-Based Intrusion Detection System

While we enjoy all kinds of benefits that computer network provides us, more and more network intrusion affairs also dump on us. So network security study is very significance. Researchers firstly used various passive ways to protect their computer networks, which produces many firewall solutions. Now general view is that only firewall solution can's solve indeed network security. Thus many of researchers focus on intrusion detection system.This paper mainly studies the following problems.It analyses merit and flaw of many detection techniques that are used by intrusion detection systems so that we can select suitable method for our system.The system structure, particularly one of distributed intrusion system, is analyzed. In this part of the paper, we have studied three prevalent middleware techniques. We draw the conclusion that CORBA can bring our intrusion detection system more merit. It is very important that CORBA can make our intrusion detection system having extensibility by its property of software bus. What's more, we provide a solution ofintrusion detection suitable for high-speed network.In view of above, we design and implement a prototype system of intrusion detection. Our system can communicate flexibly control and response unit with distributed detectors. The system had realized fair extensibility. Together with naming service of CORBA, communication control and response unit with distributed detectors is more convenient. Through this system, people may use an exclusive name to manage distributed detector, which is importance when new detector is added to this system. Without changing and recompiling control and response unit, system may manage new detector as long as new detector accords with originally IDL design.