Research And Implement Of Intrusion Detection System Based On P2P And Mobile Agent

With the rapid development of Internet, network security becomes a hot issue. Among various security measures, intrusion detection attracts more and more attention of academic researchers, because it may overcome the shortcomings of traditional security technology. Intrusion detection system can protect important data and resources, and detect intrusion by rational configuration. However, traditional intrusion detection systems have some shortcomings in certain aspects, such as flexibility, cooperation and efficiency etc.This paper introduces P2P and mobile agent technology into the field of intrusion detection, and tries to improve the system performance.This paper focuses on the features and advantages of P2P and mobile agent, and designs an intrusion detection system model based on P2P and mobile agent. PMAIDS is a P2P structure and composed by proxies, and adopts redundancy and heartbeat to ensure the security of the system. The paper describes the structure and function of each agent, collaborative process and communication model among agents in detail. The communication model is based on P2P and hierarchical structure. In order to reduce the coupling between message semantics and message transmission, the paper adopts a three-tier architecture in the implementation and designs transport layer and presentation layer in detail. With the communication mechanism, we implement the security and stability of message transmission between agents.At last, this paper realizes the basic framework of PMAIDS and test the system functionality. Experiments show that PMAIDS makes up the traditional intrusion detection system in the autonomy, cooperation and mobility, and reflects the features and advantages of intrusion detection system based on P2P and mobile agent.