一种基于MA的分布式入侵检测系统研究

Research on a Mobile Agent-based Distributed Intrusion Detection System

分布式入侵检测系统有许多优点,如可测量性和抗破坏性。然而,在具体实施过程中存在着许多障碍。移动代理(MA)技术有着适合分布式入侵检测系统具体实施的许多特性。基于移动代理的分布式入侵检测系统利用移动代理技术同等地处理来自每台被监视主机的信息,然后完成对入侵行为的全局信息提取。本文深入分析了一种基于移动代理的分布式入侵检测系统。

Distributed intrusion detection systems （DIDS） have many advantages such as sealability, subversion resistance. However, there are some impediments when they are implemented. The mobile agent （MA） technology is of many features to suit the implementation of distributed IDS. MADIDS employs MA technology to coordinately process information from each monitored host, and then completes global information extraction of intruder actions. A MADIDA is analyzed thoroughly in this paper.