Distributed Intrusion Detection System Based On Mobile Agent

With the rapid development of the computer Network technology and the gradual prevalence of the Network application, many inevitable problems of Network security have been coming to us. The Network attacking knowledge's maturing and attacking tools' increasingly complication make Firewall out of demand. It is time to adopt a deep and diversiform measure to defend our Network. As an active, security-defensive mechanism, Intrusion Detection System becomes an essential complementarity of Firewall.In this paper, a new model of the Distributed Intrusion Detection System based on Mobile Agent is designed.Comparing with the traditional Centralized Intrusion Detection System, the new one is regarded a great progress in applying distributed components to collect and analyze the intrusion data. As an autonomous detective unit, the Mobile Agents are able to move to themonitored hosts, analyze the local log data, find intrusion behaviors and then respond. This model can deal with the distributed and cooperative attacks. In a word, the Mobile Agent model is more effective than its predecessors.Finally, we validate the feasibility of applying Mobile Agents to Intrusion Detection System with IBM Aglets, a Java-based Mobile Agent platform.