分布式入侵检测体系结构研究

随着高速网络的快速发展、网络信息量的迅猛增长、网络攻击方式的不断翻新，网络入侵检测系统经过了由集中式处理到分布式处理、由简单软件结构到通用功能模块设计、由数据信息流动到代码移动的变化过程。文中给出了网络入侵检测体系结构发展的一个概貌，并重点分析了利用Agents技术的分布式网络入侵检测系统结构，最后给出了当前分布式网络入侵检测系统结构的研究内容和方向。

A Study of Distributed Intrusion Detection Architecture

： With the rapid growth of high－speed networks，exponential increment of network information，constant variation of intrusion methods，Intrusion Detection System has been experienced the following evolution：from central process to distributed detection，from simple software architecture to common function module，from transferring the data across the network to dispatching an agent to local process．From this perspective，this paper presents a thorough discuss on Agent－based distributed intrusion detection system（DIDS）architecture．On the basis of the survey，a summary of current research focuses and potential areas of DIDS are present in the final part．