基于Mobile Agents的新型分布式入侵检测系统

A mobile-agents-based distributed intrusion detection system

在分析一般入侵检测方法的基础上 ,提出了一种新的基于MobileAgent (MA)的分布式入侵检测方法 .该方法兼顾了原有的优点 ,并在一定程度上弥补了原有方法的不足 .重点讨论了MA在入侵检测系统中的应用 ,叙述了如何通过MAs之间的协作进行入侵检测 ,并利用MA的特性对入侵检测系统本身的安全性和抗毁灭性做了具体的论述 .提出的入侵检测结构提高了系统的抗毁性和自恢复能力 ,提高了入侵检测系统自身的安全性 .说明了系统的体系结构。

This thesis introduces the role of IDS in computer and network security and introduces the normal methods of intrusion detection and presents an new distributed IDS(intrusion detection system) based on mobile agent technology. The new method is more advantageous and it is easy to add new cooperating hosts and agents and to expand new intrusion patterns. This thesis emphasized the application of MA in IDS and formulated the cooperation among MAs. The cooperation among agents is implemented just by communicat...