基于移动代理的入侵检测系统模型的研究

Research on intrusion detection system based on mobile agent

阐述了基于移动代理的入侵检测系统的优势,提出了一个使用移动代理技术的入侵检测系统MAAFID。首先由数据收集代理(DCA)在网络中随机移动并收集信息,然后将收集到的信息传递给数据分析代理(DAA)来评估入侵发生的可能性。本文重点讨论了系统中数据收集代理的数目与检测出入侵发生的可能性二者之间的定量关系,最后还给出了一个仿真结果。

A intrusion detection system (MAAFID) using mobile agent technology is presented in this paper and the advantage of intrusion detection system based on mobile agent is elucidated. First DCA collects information when it randomly moves around the network. The DCA then transfer the information it has collected to a DAA which will evaluate the probability of intrusion. The paper mainly discusses the quantifiable relationship between the number of DCA and the probability of detecting an intrusion, and finally gives a simulation result.