基于具有重构功能MAS的入侵检测系统

Intrusion Detection System Based on MAS with Rebuilt Function

针对基于MAS(Multi AgentSystem)的入侵检测系统在自身异常情况下普遍存在单点失效甚至系统崩溃的缺点,提出的MAS在系统自身异常情况下具有系统重构功能,增强了入侵检测系统在系统级上的健壮性。详细介绍了基于具有重构功能MAS的入侵检测系统的体系结构、系统中各Agent的功能、分工,重点介绍了在自身异常情况下MAS的重构过程。

Facing to the disadvantage of the intrusion detection system,an IDS based on MAS which has the rebuilt function is proposed.At the same time the systemic structure of the intrusion detection system based on the MAS with rebuilt function, the function of each Agent and the procedure of the MAS in the system are introduced in detail.