分布式网络入侵检测代理系统的改进设计方案研究

提出了一个分布式网络入侵检测代理系统的改进设计方案,以层次式的体系结构为蓝本,结合对等式模型提出了双控中心策略,当"主控制中心"失效时,由"从控制中心"代替行使控制权,按对等式方式工作.该方案提高了系统的容错性,最大可能的避免了单点失效而引起连锁反应问题.同时给出了在移动代理整合入侵检测系统(MACIDS)框架下,基于测量服务层次协议的Agent详细设计,通信平台的3个层次、4个功能组件的划分和如何在分布式、对等式两种工作方式共享数据和资源进行通信的过程.

Research of improvement on Agent-based distributed network intrusion detection system

An improved design which is about a distributed web intrusion vicegerent detection system is proposed.The project is based on hierarchy-style structure,and uses equity model to propose a double-control center strategy.Its function is when main-control center is invalid,secondary-control center exerts control power instead and works with equity method.The system's fault tolerant ability is im-proved and chain-reaction due to single point invalidation is avoided in utmost.It also puts out an agent design based on the frame of mobile agent-based cooperative intrusion detection system(MACIDS) which is based service level agreement(SLA),and communication platform's division of three levels and four functional,and how to share data and resource to communication in distributed and equity model.