Agent-Based Cooperation Hierarchical Intrusion Detection Model

This thesis make some research on major intrusion detection technology facing the hot spot of network security. And it make some analyses on advantages and disadvantages of some solutions.This thesis analyze normal process of intrusion detection technology and make some analyses on classification of intrusion detection technology. It also give a simple summary on major research of distributed intrusion detection systems.Actual IDS have some problems facing the combining use of analyzing technology. This thesis did some work on the problem and propose a Agent-based Cooperation Hierarchical Intrusion Detection Model. After make a deep research on the two design points of models, the thesis also analyze parts of model deeply. Analyzing nodes use the multi-agents technology and it has some good property on data-gathering, analyzing and management. The communication among analyzing nodes and administration consoles uses the IDXP protocol and IDMEF message. This thesis also make some analyzing on the XML storing to database.