A Distributed Real-Time Intrusion Detection System for High-Speed Network

Now centralized solutions of real time IDS （intrusion detection system） in high speed network have reached their limits because of several technical difficulties encountered in keeping pace with the increasing network speed and communication complexity between applications A DRTIDS （distributed real time intrusion detection system） is proposed, which is centered around a load balance traffic slicing mechanism that ramifies the total packet stream into branches of manageable size and guarantees that each branch contains all the evidence necessary to determine a specific attack With the traffic partitioning done in the analyzer node, multiple sensors can manage sub packet stream simultaneously This approach is described in details