Research On Distributed Intrusion Detection System Based On Mobile Agent

Internet has become an indispensable part of people's lives, however, the network intrusion seriously affected the normal operation and use of the network, even to the users of the tremendous loss, network security has become an important research topic. Often rely on network security firewall technology, restricted by access control mechanisms unauthorized access, firewall technology, but for validated users to access or malicious attacks are powerless, which led to the development and research of intrusion detection systems. Intrusion Detection System as an active defense system, which have active defense capabilities against unknown attacks.However, intrusion detection systems are still in stage of exploration and research, the existing system has many shortcomings. For example, a single network node failure occurs, network overload and poor maneuverability. In this paper, we try to address these issues; and proposed a Distributed Cooperative Intrusion Detection System Based on Mobile Agent (DCIDSMA). The various components of DCIDSMA can be independent and coordinate the implementation of tasks, to avoid a single node failure leading to system collapse. System network data collection, analysis and response be completed by the Snort, while the system monitors the movement of Agent. For each node of the analysis to make a deeper analysis, calculated from the distribution of large amounts of data to complete the monitoring node to avoid data are concentrated in system console processing, real-time system is enhanced. System uses data aggregation and correlation of agents, effectively reduce the duplication of the alert, while the invasion of deeper intentions can be found. This research work is as follows:gave overview of intrusion detection and distributed intrusion detection system of research, relevant concepts and principles; In-depth study of mobile agent in distributed intrusion detection System in the possibility of the application, and proposed a distributed cooperative intrusion detection system model based on mobile agent. While the various components of the system design and implementation in detail. The test shows that the system basically meets the design requirements.