Research Of Distributed Intrusion Detection System Based On Agent

With the rapid development of computer, the computer network extends to all fields, due to the openness and sharing of the network, network security events emerged continually. People give their attention to network security more and more. Intrusion Detection System has been accepted by more and more people. As the means of attack constant renovation, the traditional intrusion detection systems are not competent detection tasks. Appearance of Agent technologies, injected new vitality to the intrusion detection system ,which brought many advantages to Intrusion Detection System, such as reducing the network load, shorten the network latency, asynchronous self-execution, dynamic adaptive, run in heterogeneous environment, robustness and fault-tolerance .In this paper, an Agent-based intrusion detection system model is designed. The system consists of a central control console for management, and multiple target hosts. Through using the Agent technologies, data processing is distributed into each node of system, in order to achieve maximum distribution of the system. Comparing with the traditional distributed intrusion detection systems, Agent-based intrusion detection system has higher performance and security, it can solve successfully to the bottlenecks of traditional distributed Intrusion Detection System, reduce the network and host resources occupation. we desire the major components in detail, including data collection Agent, analysis Agent and Mobile Agent libraries etc. For the security problems which are caused by using Agent into Intrusion Detection System ,we put forward the corresponding the security policy and methods.