|
|
|
SPiDER-1
Agent l
SPiDER-1 Manager
l SPiDER-1
Console
SPiDER-1 Manager
Performance
One of the most important elements
in integrated security management is the performance of the system
in terms of dealing with the management of events. Especially for
Intrusion Detection Systems, the ability to deal with all the logs
and traffics is the most important factor in determining its performance.
The
ability and performance of collecting events is in other words the
performance level of the Management Server. The management flow
influences much the performance, and the Multithread Method of SPiDER-1
is a very efficient management flow to enhance the performance of
the Management Server to a high degree.
- Event Management
Flow -
- Results of Management Performance Benchmark Test
-
|
|
|
Category
|
Description
|
|
|
|
Test System |
Management Server
SUN Ultra 2
400MHz 2CPU
512
MB Memory
Built-in Disk 32GB
DBMS : Oracle 8.1.6
|
|
|
|
Event Occurrences |
100 events/second from 10 agents, which are sent
to the Management Server
|
|
|
|
Result |
Without saving: 8,500 / second
Saving on
file: 5,500 / second
Saving on DB: 2,000
/ second
|
|
|
|
Analysis of Result |
The general capacity is over 5,000/second with variability
due to the I/O function of the Disk.
|
|
|
|
|
