基于移动agent的分布式入侵检测系统研究

Mobile agent-based distributed intrusion detection system

为了提高现有分布式入侵检测系统的效率和性能,提出了一种基于移动agent的分布式入侵检测系统模型。将移动agent技术应用于入侵检测中,并给出了其移动agent间的可靠通信方法,实现了agent的协同检测。实验结果表明,由于移动agent的应用,入侵检测系统的节点成为了可移动的部件,从而使该模型具有了更强的抗攻击性和入侵检测能力。

Aiming at improving the effects and performance of available distributed intrusion detection system, this paper put forward a model of mobile agent-based distributed intrusion detection system （MADIDS）. And also set up the credible communication among mobile agents and achieved the cooperation detection of the agents. The experiment results show that owing to the use of mobile agent in the MADIDS, the nodes of intrusion detection system become moveable so that the model of MADIDS obtains a higher property of anti-intrusion and a higher performance of intrusion detection.