Application of Grid Technologies in Linux Host Intrusion Detection System

A new type of Linux host intrusion detection system is designed with the help of grid technologies to solve the problems existing in the current Linux host intrusion detection system. In this system, grid environment is built by the Globus Toolkit on the data collection nodes; the Linux host´s feature data and the network´s feature data correlated to the Linux host are collected on the distributed nodes; the integration and access of the distributed feature data are realized via grid middleware OGSA-DAI; and then the related data would be sent to analysis center in the form of grid services. By using grid technologies, problems such as incomplete intrusion features, load concentration and weak extensibility in traditional LHIDS are efficiently solved.