基于移动Agent的P2P入侵检测系统模型研究

Research of Intrusion Detection System Model Based on P2P and Mobile Agents

该文先分析了网络结构变化带来的问题和C/S模式的不足。并简述了移动Agent和P2P技术的优点,提出了一种采用移动Agent技术和P2P结构的入侵检测系统的模型。该模型避免了分布式入侵检测系统存在的单点失效问题和传输瓶颈问题,提高了系统的自身安全性。最后指出了模型的优缺点,并提出了下一步的工作。

At first, the problem of network structure changing and deficiency of C/S model are analyzed. Then outlines the advantages of mobile and P2P technology, a intrusion detection system model based on P2P architecture and Mobile Agent technology is proposed. It can avoid the questions of the simple-point invalidation and the transmission bottleneck in the current distributed intrusion detection system, and enchance the security. At the end, the advantage and defect of the model are proposed, and forward the corresponding countermeasure.