Study On A Dynamic Constructed Distributed Intrusion Detection System Based On Mobile Agent Technology

With the fast development of computer network technology, the network has more and more influence on social life, the network security question also becomes more and more important, there are many new ways to attack the security of the network, in recent years IDS as one kind of active information security defense technology has becomes a hot spot in network security research.On the other hand, mobile agents technology as an emerging technology in the computer science domain at present, its unique migratory and the autonomy have brought a huge innovation for the distributed computing, along with the ID technology development and the application, the motion agents technology also starts to introduce in the research of distributed intrusion detection technology.Based on the production and development of the IDS, and analysis of today's ID, this thesis introduces a model of distributed intrusion detection system (DIDS) based on mobile agents, the new one is regarded a great progress in applying distributed components to collect and analyze the intrusion data. The framework makes use of the properties of mobile agents such as mobility, flexibility, adaptability, operating in heterogeneous environments, reusing code to overcome a number of shortcomings of currently deployed IDS, such as lock of efficiency, lack of portability among monitored environments, limited flexibility (includes scalability and dynamic reconfiguration), limited upgradability, etc. It might enhance the distributed intrusion detection system's efficiency and accuracy, and it made a beneficial attempt to the application of mobile agents technology in the IDS.This thesis also elaborated this model based on present popular mobile agents platform - IBM Aglets on realization, and has carried on the basic test and the confirmation.