基于移动Agent的网络入侵检测系统的研究与设计

Research and design in Intrusion Detection System based on Mobile Agent

为了解决传统入侵检测系统存在的问题,研究并设计一个基于移动Agent的网络入侵检测系统.划分了入侵检测系统内部移动Agent的功能,并给出了移动Agent的通信方式和交互流程.结果表明:该系统能够有效地减轻了网络负载,缩短网络等待时间,实现入侵检测的动态自适应,从而降低了系统的误报率和漏报率.

To solve the problems of traditional intrusion detection system,a design of Intrusion Detection System based on mobile agent was introduced.The internal function of Mobile Agent was divided.Moreover,the communication manner and interactive process were applied in the paper.It is can be seen from the result that the system could reduce the network load and shorten the waiting time of network.Then,the dynamic adaption of the system could be implemented while false alarm rate and false negative rate would be reduced.