DocumentCode :
3113775
Title :
Dynamic load balancing for network intrusion detection systems based on distributed architectures
Author :
Andreolini, Mauro ; Casolari, Sara ; Colajanni, Michele ; Marchetti, Mirco
Author_Institution :
Univ. of Modena & Reggio Emilia, Rome
fYear :
2007
fDate :
12-14 July 2007
Firstpage :
153
Lastpage :
160
Abstract :
Increasing traffic and the necessity of stateful analyses impose strong computational requirements on network intrusion detection systems (NIDS), and motivate the need of distributed architectures with multiple sensors. In a context of high traffic with heavy tailed characteristics, static rules for dispatching traffic slices among distributed sensors cause severe imbalance. Hence, the distributed NIDS architecture must be combined with adequate mechanisms for dynamic load redistribution. In this paper, we propose and compare different policies for the activation/deactivation of the dynamic load balancer. In particular, we consider and compare single vs. double threshold schemes, and load representations based on resource measures vs. load aggregation models. Our experimental results show that the best combination of a double threshold scheme with a linear aggregation of resource measures is able to achieve a really satisfactory balance of the sensor loads together with a sensible reduction of the number of load balancer activations.
Keywords :
computer networks; resource allocation; security of data; telecommunication traffic; dispatching traffic slices; distributed architectures; dynamic load balancing; dynamic load redistribution; multiple sensors; network intrusion detection systems; Computer architecture; Computer networks; Dispatching; Distributed computing; Intrusion detection; Load management; Load modeling; Sensor phenomena and characterization; Sensor systems; Telecommunication traffic;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Network Computing and Applications, 2007. NCA 2007. Sixth IEEE International Symposium on
Conference_Location :
Cambridge, MA
Print_ISBN :
0-7695-2922-4
Type :
conf
DOI :
10.1109/NCA.2007.17
Filename :
4276617
Link To Document :
بازگشت