基于Agent的内网安全系统研究

The Research of an Agent-Based Internal Network Security System

针对目前分散式安全服务的种种弊端,通过将多Agent系统的多种特性引入网络安全系统,提出了一种基于网络拓扑结构感应能力以及行为自主性的多Agent融合方法的网络安全系统模型.以身份认证、访问控制、漏洞检测、安全审计等网络安全业务设计和实现了多种类型Agent,使网络安全系统提高了适应性能力等特征.通过自保护检测服务,确保Agent的安全通信及平台的顺利实施.该系统能有效地实施上述安全任务,提高网络安全;并能充分利用现有设备,实施廉价,可扩展性好.

Aiming to the abuses of current distributed .security services, this paper applies the characteristics of multi-agent system to the network .security system, and proposes a model based on the convergent method which has the induction ability of network construction and behavior independence. The system designs and implements several kinds of agents with user authentication, network access control, vulnerability detection and secure auditing; increases the adaptability and other characteristics of network security system. Through the self-prevention detection service, the system guarantees the secure communications among the agents and the ,smooth platform deployment. The system can effectively implement above security tasks, increase the security of the internal network; thus is high efficiency, scalable and open.