Research And Implementation Of An Intrusion Detection System Based On Agent

With the development of computer and network technology, network security becomes more and more important. Traditional security technology such an encryption and firewall doesn't satisfy the requirement of network security, so intrusion detection technology is proposed, which is dynamic and real-time processing, and has response function. Intrusion detection system is the main part of Policy Protection Detection Response (P2DR) security model.By analyzing and researching current agent-based intrusion detection models, this thesis proposes an intrusion detection model based on agent. The distributed model composed of agent console and several agents. Each agent has proper detection method and data source, so the system can detect intrusion effectively. How to apply data fusion technology in the system is discussed.The Implementation of agent and agent console is described in detail. With proper method, this intrusion detection system is tested. According to the result of test, the system works effectively and attains the goal of system design.