基于移动Agent的分布式入侵检测系统研究

Research of Distributed IDS Based on Mobile Agent

入侵检测系统是一种重要的主动安全防御技术,它可以和防火墙结合在一起,弥补防火墙的不足,为网络安全提供实时的入侵检测并采取相应的防护手段。本文从讨论基于主机和基于网络的入侵检测系统的局限性出发,阐述了分布式入侵检测系统和移动Agent技术,提出了一种基于移动Agent的分布式入侵检测系统模型,对模型进行了详细分析和设计,并给出了初步的实验结果及结论。

IDS is an important technology for active security defense, together with firewall, it can fetch up the shortage of firewall, provide real -time intrusion detection and adopt relevant means for network safety. This paper discusses the localization of IDS based on host and network, analyzes the technology of DIDS and mobile agent, designs an implementation case of this technology, and gives the primary result of experiment.