Using a Distributed Object-Oriented Database Management System in Support of a High-Speed Network Intrusion Detection System Data Repository - Brossura

Polk, Phillip W.

Brossura

ISBN 10: 1249587824 ISBN 13: 9781249587828

Casa editrice: LIGHTNING SOURCE INC, 2012

Riassunto

The Air Force has multiple initiatives to develop data repositories for high-speed network intrusion detection systems (IDS). All of the developed systems utilize a relational database management system (RDBMS) as the primary data storage mechanism. The purpose of this thesis is to replace the RDBMS in one such system developed by AFRL, the Automated Intrusion Detection Environment (AIDE), with a distributed object-oriented database management system (DOODBMS) and observe a number of areas: its performance against the RDBMS in terms of IDS event insertion and retrieval, the distributed aspects of the new system, and the resulting object-oriented architecture. The resulting system, the Object-Oriented Automated Intrusion Detection Environment (OOAIDE), is designed, built, and tested using the DOODBMS Objectivity/DB. Initial tests indicate that the new system is remarkably faster than the original system in terms of event insertion. Object retrievals are also faster when more than one association is used in the query. The database is then replicated and distributed across a simple heterogeneous network with preliminary tests indicating no loss of performance. A standardized object model is also presented that can accommodate any IDS data repository built around a DOODBMS architecture.

Dettagli dell'edizione

• Editore: LIGHTNING SOURCE INC
• Data di pubblicazione: 2012
• Lingua: Inglese
• ISBN 10: 1249587824
• ISBN 13: 9781249587828
• Rilegatura: Copertina flessibile
• Numero di pagine: 164
• Contatto del produttore: non disponibile
• Persona responsabile: non disponibile