基于移动代理入侵检测模型的研究

本文提出一种基于代理的入侵检测系统采用了移动代理和多代理合作技术,解决了传统的检测系统数据量过大、对入侵事件反应不及时的问题,它的移动代理技术,起到了主机负载均衡的效果。这个入侵检测系统采用了特征匹配和数据统计相结合的方式对入侵事件进行检测,大大降低了误警率。该检测系统由代理系统、存储系统、控制系统、分析系统和响应系统六部分组成,具有良好的分布性能和可扩展性。它将基于网络和基于主机的入侵检测系统有机地结合在一起,提供集成化的检测、报告和响应功能。

The Research Of Network Intrusion Detection Technology

We design an agent-based intrusion Detection System which has good distribute and scalable ability.use mobile-agent and many-agent techn010gy, soive the problem of traditional IDS＇s large data and can＇t response immediately its mobile：agent technology .can batance the load.The IDS detects the intrusion with the means of pattern and data statistic,largely decreases the fault alarm ratio.it is compose of agent system,storge system,control system,analyse system and respose system.It combine the network-based IDS and host-based IDS into a system,and provide detection,report and respone together.