Research On Intrusion Detection System Based On MA Used In Enterprise Information System

With the rapid development of network technology and Enterprise Information System, computer security is increasingly more important. The intrusion detection is an essential component of the protection mechanisms of the security infrastructure. But in the face of rapidly updated network environment and various new attack methods, to some extent, there are some limitation for traditional IDS in the aspects of efficiency, extensibility and adaptability.First, this paper introduces the computer network security and some concept about IDS, and reviews the development process and the status quo of intrusion detection systems.Second, we describe the technology of mobile agents, by introduced the concept, activity, life-cycle model, and so on. A distributed intrusion detection system model based on MA and distributed technology is confined. This system model is an open system with good scalability. It is easy to add new cooperated hosts and agents to expand new intrusion patterns. We give detail design scheme by tell data management module, system intrusion detection module and intrusion response module.Finally, we integrate this intrusion detection module and enterprise information system and have a test, the result tell us that the intrusion detecion model can guarantee the safety of the system, data integrity and reliability under the premise that enterprise information system will not be affected, to make sure the information system can normal operation.