Research Of Distributed Intrusion Detection System Model Based On Mobile Agents

With the speedy expansion of network scale and complexity, intrusion detection systems become an indispensable part of network security because of their capability of auto-detection in the intrusion behavior in computer systems and networks. Intrusion detection technology is a new generation security guard succeeding traditional security protection measures such as firewall,data encryption and so on. It can detect the attacks not only from outside but also the inner ones.However, with the appearance of large scale and high speed network, it leads to more and more rampant the actions of hackers, the more secluded intrusive tricks and unpredictable losses which pose a large challenge to the existing IDS.This paper puts forward a distributed intrusion detection system based on mobile agents, which can improve the robustness, adaptability, flexibility and extensibility of the traditional intrusion detection system. The system consists of four parts: Manager, Host Monitor agent, Assistant Agent and Response Agent. This model employs MA technology to coordinately process information from each monitored host, and then completes global information extraction of intruder actions.The thesis begins its discussion by introducing of knowledge of intrusion detection and mobile agent.Then summarizes the advantage and disadvantage of the existing DIDS models based on agents and analyses the advantage and characteristic of the combination of mobile agent technology and intrusion detection technology. Then a DIDS based on mobile agents is proposed. At last we design, analyse and archive this demo system in detail and give an evaluation...