Research Of The Mobile Agent-based Security Interaction Model

As the information-based degree of our country improves, security becomes more significant day by day. The network security protection has been transited from simply passive, static protection to three-dimensional security interaction protection with the combination of static and dynamic, protection and detection.In this paper, security interaction technology is studied, existing security interaction models and security interaction systematic platform are analyzed and compared, and their deficiencies are pointed out. The systematic structure and key technologies of Mobile Agent technology are studied, and the advantages of applying mobile Agent to security interaction model are presented. Based on those, the Mobile Agent-based Security Interaction Model, MASIM for short, is put forward.The key problems of security interaction model design lie in the real-time distribution of policy and designing security interaction protocol. MASIM classifies the security products into security detectors and security protectors, and then, divide the network application circumstance into different security area; with mobile Agent delivering the security policy and interaction policy between systematic policy management center, different parts in one security area, and different areas, the real-time policy distribution is realized. By improving IDXP/IDMEF correspondingly, security interaction exchange protocol and the data exchange format of security interaction messages are designed which are suitable for the characteristics of mobile Agent.In this paper, mobile Agent technology is creatively adopted to MASIM. so that MASIM makes up for the short comings of existing security interaction model: poor real-time policy distribution and overmuch flow. It not only realizes the real-time policy distribution, but also has such advantages as lightening network load, saving network bandwidth and easy expansion.