The Research And Implementation On The MA-based IDS

With the rapid developing and wide popularizing of the network, the traditional IDS(Intrusion Detection System) architectures can't meet users' need for the increasingly complicated and concealable intrusion. In this paper, An architecture for IDS called IDBAS(Intrusion Detection Based on Aglets and Snort) is proposed when we research the new technology called mobile agent and the current IDS architectures based on mobile agents which commonly have a number of problems that limit their configurability, scalability or efficiency. IDBAS architecture takes advantage of such as characters as mobility, flexibility, adaptability, portability, code reusability of mobile agent. And it also avoids some problems like a single point of failure, responding not in time, poor scale, poor automation and so on. The characters and functions of the different components of IDBAS are introduced in detail. Then the security, advantage and disadvantage of it are discussed.We implement the IDBAS architecture with ASDK developed by IBM JAPAN and Snort which is an excellent open source IDS. At last we take a simulative attack for it.