基于智能体架构的网络行为监控集成系统

A COMPUTER INTEGRATED SYSTEM FOR NETWORK BEHAVIOR MONITORING WITH AGENT ARCHITECTURE

设计了一个采用分布式多Agent架构的网络行为监控集成系统NBMIS(Network Behavior Monitoring Integrated system)。阐述了该系统的集成框架,Agent的交互模型与Agent的结构。详细讨论了系统中各个Agent的功能及实现的关键技术。NBMIS具有分布式多Agent协同、系统可扩展性好的特点,在网络结点数庞大和网络高负荷运行情况下能获得良好的监控性能。应用实践表明NB- MIS能有效地对网页浏览、附件下载、邮件收发、FTP文件传输、IM聊天等网络行为进行监视和控制,且能有效发现潜在的网络安全问题并及时报警。

A network behavior monitoring integrated system NBMIS based on distributed multi-agent architecture is designed. The framework of the system, the interactive model and architecture of Agent are put forward and illustrated. Then, the functions and the implementation methods of each Agent are discussed in detail. Having the characteristics of distributed multi-agent cooperation and expansibility, NBMIS can have good monitor performance when the number of network nodes is large and the network is running at a high load. Practices show that NBMIS performs well in monitoring most network activities, such as webs browsing, files downloading, emails sending and receiving, files transferring by FTP, chat- ting by IM,and so on. It is also able to discover hidden security troubles and raise the alarm to the administrator in time.