The Research Of Distributed Intrusion Detection System Based On Mixing Agent

With the continuous growth in the network scale and rapid development of network technology, security was becoming more and more important to computer network. Intrusion detection occupies a very important position in the whole security system, especially in dynamic security defense system. Nowadays intrusion detection is playing an even more important part in network security.Firstly, the current situation and menace to network security was analyzed in the thesis. Secondly, the fundamentals of intrusion detection were summarized. The present situation and development trend of intrusion detection at home and abroad were studied too. Together with the basic principle of Agent and distributed processing, their practical applications in intrusion detection system were analyzed extensively. The difference between the Agent based intrusion detection system and the traditional intrusion detection system was pointed out.A new architecture model of Agent-based distributed intrusion-detection system was put forward on the basis of comparative analysis to those existing distributed intrusion-detection system and their architecture. All-purpose function and detection flow of intrusion detection system were analyzed in the thesis,the function and operating mechanism of the three important modules in intrusion detection Agent were made in-depth and careful studies especially.