A Distributed Network Anomaly Detecting System Based on CORBA
Jinsong Jiang · Microelectronics & Computer · 2006
This paper introduce the concept and thought of network anomaly detection, then analyze and compare the techniques of middleware, and lay emphasis on designing of a distributed network anomaly detection system based on middleware. The system achieves distributed communication through CORBA, and can detect network anomalies through distributed way. It is more real-time and has better ability on data processing compared with single point detection, especially for large network. Anomaly can be detected through correlated abrupt changes of MIB variables. The well defined security framework of CORBA has ensured this network anomaly detection system's own security.