一种基于移动Agent的移动Ad Hoc网络入侵检测系统

Mobile agents-based intrusion detection system for mobile ad hoc networks

移动Ad Hoc网络比传统的有线和无线网络面临着更多的安全问题,入侵检测技术可作为第2道安全防线来弥补入侵预防技术的不足;由于移动Ad Hoc网络所具有的特殊性,使得已有的入侵检测系统不适合被运用到移动Ad Hoc网络中。文章设计了一个新的适合移动Ad Hoc网络的基于移动Agent的分布式入侵检测系统,该系统充分考虑了移动Ad Hoc网络资源受限的特点,对整个网络进行了簇的划分并且提出了一个划分簇的算法,进而对不同的Agent进行了合理分配。

Mobile ad hoc networks have more security problems than the conventional wired or wireless networks, and intrusion detection approaches, as a second line of defense, can make up for deficiency of intrusion prevention approaches. However, considering the particularities in mobile ad hoc networks, the present detection approaches are not fit for such networks. In this paper, a novelly distributed intrusion detection system based on mobile agents is put forward for mobile ad hoc networks. In this intrusion detection system, the limited resources have been adequately taken into account. At the same time,to assign different agents reasonably, the whole network is partioned to several clusters and an algorithm for selecting clusters is brought forward.