基于多代理的分布式入侵检测系统

近年来,入侵检测系统IDS作为信息系统安全的重要组成部分,得到了广泛的重视。IDS对计算机和网络资源上的恶意使用行为进行识别和响应,不仅检测来自外部的入侵行为,也监督内部用户的未授权活动。提出了一种基于多代理技术的分布式入侵检测系统体系结构的设计方法,并对相应的实现技术进行了阐述。

In recent years, intrusion detection system (IDS), being the important part of the information security system, has gained extensive attentions. IDS watches the computer and network traffic for intrusion and suspicious activities. It not only detects the intrusion from the extranet hacker, but also the intranet users. This paper presents a structure of distributed intrusion detection system using the multi-agent technology, and formulates the design of the prototype system.