The Research And Design On Distributed Intrusion Detection System

In the whole world, the attack on computer and network establishment is so severe that it has become a problem which is worth our much more attention. And many government web stations has become the hot targets for Hacker. Thereby, Institutions are urged and required to detect those rampant intrusion and protect themselves from being attacking as possible..In this paper, we firstly analyze some security problems and the security technologies on Internet, then we discuss the advantages and disadvantages of different technologies. After that we give much more introduction and analysis on intrusion detection and distributed intrusion detection technologies. We found that distributed intrusion detection system (DIDS) still has following restrictions: it cannot detect and clear virus, and the structure of multi-agent is not fit for multi-level network framework. Therefore, we bring forwards a new distributed intrusion detection modal, which challenges network hacker and virus. The modal uses structure of multi-hierarchy agent and integrates anti-virus function.The main work of this paper is to expound the design theory and implement procedure of this new DID modal. And we have programmed an experimental system in order to demostrate those functions.In this paper , we apply agent technology, statistic modal and expert system modal in the process of designing .Finally, this paper discusses the development directions of security methods , and brings forward some advice.