The Research And Achievement Of Instruction Detection System Based On Mobile Agent

With the rapid development of Internet,digitalization degree of enterprise management is higher and higher,and more and more information is transported by net among various management sections in a enterprise.Because of the character of opening and sharing make it apt to be attacked and destroyed from outside,safety of Internet has been the one of the most concerned problem by enterprise users.From the viewpoint of technology layer, intrusion detection is especially important in net safety technology and intrusion detection system structured by using this technology will play a even more important part in the prevention of net safety in the future.In an enterprise network, it can find and prohibit the hostile intrusion behavior in time to protect the safely-normal operation of the enterprise information terrace from some hackers and competitors.Firstly, this thesis based on network architecture of enterprise analyses and summarizes the technologies of IDS and mobile agent, combining the features of modern LAN of enterprise,and brings forward a kind of model framework of an agent-based intrusion detection system which is used in modern enterprise LAN.This model uses distributed architecture,and the agent technology to detect the intrusion in the distributed environment.It can detect intrusion effectively in enterprise LAN.And it has good extension and better real-time of detection and response and so on.Secondly, it's the introduction of the design and implementation of this system in detail.the system which is researched in this thesis and is applied in net of enterprise is composed of three modules:Control center,Host System and Mobile Agent.The Control center is responsible for the management of every host system and the dispatch of mobile agents and through the help of mobile agents carries on the intrusion detection.The host system is the basic framework of the whole system,and is responsible for the information access,the analysis and certain response.Each host must install Aglet in order to provide the real-time executive environment.The mobile agent is implemented by a mobile agent process that is coded by Java, working on the platform of Aglet and feedback the suspicious information logged on the host system to control center,and according to the information,the control center carries on certain response.It is to summarize the designed intrusion detection system and analyses its character and the exited problems at the end of this paper.