The Research Of Mobile Agent-based Distributed Intrusion Detection System

With the rapid development of network technology and many operations based on network, the problems of network security are becoming more and more critical. The people are suffered by these problems hardly while enjoying the enormous advantages of network. So the methods which can protect the network security are needed extremely.This paper introduced the concepts, goals and models of network security at first, then analyzed the traditional security technologies and their merits and shortcomings. We discussed the effects of intrusion detection system in the framework of security. The concepts, the research conditions and developments of IDS(intrusion detection system) were introduced in detail. The perception and characters of mobile agent was summarized. A kind of mobile agent based distributed intrusion detection system model was proposed in the end.The main works in this paper are as follow:(l)The characters of mobile agent were explained.(2)Analyzed the advantages and the flaws of some IDS models based on the mobile agent technology.(3)Comprehend the aglet and the snort deeply.(4)A kind of mobile agent based distributed intrusion detection system model was proposed. This model integrated with the technology of mobile agent and distributed system. It can resolve the problems of IDS , such as real-time badly, the jar of execution and problems of isolated node.(5)Designed the key module and given the code.Some technologies of system implementation were discussed , including the develop skills of Aglet platform, the programming of snort rule and snort plungin, the mechanism of agent communication, the construction of the lib of user behavior based on host detection.