A Practical Communication Mechanism for Heterogeneous Sensors in Distributed IDS
Fan Lintao · Jisuanji gongcheng · 2004
A new kind of communication mechanism for distributed IDS is proposed. The paper gives the architecture and organization of the communication mechanism, proposes a universal descriptive method based on XML and IDMEF for different kinds of intrusion events so that it can solve the exchange problem in heterogeneous and distributed IDSs,a secure communication strategy based on SSL for the message exchange between sensor and console is also presented. The performance of the proposed communication mechanism is analyzed quantitatively.