基于SFT,CPN和移动Agent的分布式入侵检测系统

Distributed Instrusion Detection System Based on SFT,CPN and Mobile Agent

移动Agent入侵检测系统(Mobile Agent Intrusion Detection System,MAIDS)是一种基于Agent的入侵检测系统。对MAIDS的描述采用SFT到CPN的转化首先用SFT(Software Fault Tree)描述入侵行为,然后将SFT转化为CPN(Colors Petri Nets)以建立入侵行为的描述模板,最后转化成分布式Agent的实现。基于SFT、CPN和移动Agent的分布式入侵检测系统具有错误少、数据量小等优点。

The Mobile Agent Intrusion Detection System（MAIDS） is an Agent- based distributed Intrusion Detection System（IDS）. The starting point of this paper is a description of intrusions expressed as SFT. Then the SFT is translated to CPN to build the description template of intrusion. Finally the CPN are implemented as distributed Agent. Distributed intrusion detection system based on SFT,CPN and mobile Agent has much advantages such as making less mistakes. The innovation is using the transform from SFT to CPN in the description of MAIDS.