Mobile Agent Based Intrusion Detection System

After analyzing and comparing the existing IDS and MA techniques, the paper proposes a MAIDS (Mobile Agent Based Intrusion Detection System) model in order to improve efficiency and scalability.The system adopts the architecture of hierarchical and network. Such architecture makes the system easy to manage and effectively solves the problem of the network load. The network existing among the key node solves the invalid problem of the single node existing in the present intrusion detection system.The system is composed of manage Agent, data collection Agent, data analysis Agent, responds Agent and database. The dynamic configuration management and scalable property of the system is strengthened through dynamic adding, deleting or revising agent. The data of the host is measured and analyzed by the method of statistic and combines together in statistical analysis and pattern match, while the data from network is analyzed by the method of protocol analysis and pattern match. The accuracy of the intrusion analysis is strengthened by adopting such multi-level analysis model.Using the thought of object-oriented, the class hierarchy of all system components is designed and realized on the basis of Aglet. In solving the security problem of the agent itself, the system adopts the MAC authentication mechanism and access control mechanism to guarantee the security of agent system and agent itself.