Intrusion Detection System Based On Mobile Agent

In this paper, We introduce the Intrusion Detection System in the following aspects such as intrusion detection model, detection theory based on which we provide an Intrusion Detection System based on mobile agent. Our system consists of two parts which are MAIDS and MAIDS_STATION. MAIDS is the console of our system through which we can configure and control our system. MAIDS_STATION provide the running environment to detection agent. System administrator can generate agent or dispatch agent to destination hosts. Once the agent dispatch to the host on which MAIDS_STATION had been installed, the agent can run and monitor the network.The two popular detection modes, Misuse Mode and Anomaly Mode, have been taken into the design of detection part of the Agent. In Misuse Mode , modules such as port-scanning, sniffer, and IP spoofing have been implemented. In Anomaly Mode, we discussed network anomalies and designed modules to detect network anomalies.Then we discuss the security of agents, especially how to ensure security under the environment of Aglet.After that we evaluate the performance of the system. By the testing results we analysis the feasibility and practicability . Lastly ,some features unimplemented and some problems for further study have been addressed in the last portion of dissertation.