Research And Implementation On Entity Communication Mechanisms Of DIDS

With the development of network technology and the integration of network intrusion technology, together with the tendency of the cover-up of intrusion means, the indirection of intrusion object, and the expansion of intrusion scale being more and more serious, the limitation of traditional single computer intrusion detection system is obvious and distributed intrusion detection system is applied widely. Distributed intrusion detection system is an intrusion detection system distributed in the network, whose goal is to detect marvelous intrusion behaviors of different nodes in the network by monitoring network and the hosts connected with it and synthetically using detection technology based on both host and network. The key technologies are coordinated handling of detection information and abstraction of intrusion global information.A question faced by distributed intrusion detection system is how to implement the information exchange between several intrusion detection system entities. Based on the distributed intrusion detection system model based on agent advanced by our team, this paper designs the entity communication mechanism of distributed intrusion detection system to implement the information exchange between different entities applied in different operation systems. The establishment of the communication mechanism is to transform the information detected by isomerous intrusion detection entities into a uniform data format and expresses it in some way.First, this paper briefly introduces the distributed intrusion detection system model based on agent and discusses the assemble language, communication mechanism, tolerance mechanism and security mechanism. Second, it designs the communication mechanism of distributed intrusion detection entity of system and confirms major...