Mobile Agent-Based Distributed Intrusion Detection System

With the rapid development of Internet, network security has been a problem that cannot be ignored. As an important component of the network security, intrusion detection has already been one of research hot spots in the field of network security.First, this paper investigates intrusion detection technology and mobile agent technology,analyzes the existing mobile agent-based intrusion detection systems,and analyzes the advantages and disadvantages of mobile agent technology's application in distributed intrusion detection system. Furthermore, the intrusion detection system's influence to the performance of host computer is analyzed emphatically. On this basis, combined with grid technology,the model of mobile agent-based distributed intrusion detection system is designed. It can fully exploit idle system resources to detect intrusion behaves and realize load balance, and can solve the universal problem of intrusion detection system occupiying too much resources and low performance under high load. In addition, the implementation framework, functions of main parts and work flow are given, and the main characteristics of the model are summarized. Afterwards, the main modules of the model are designed, the related key technologies of the model are analysed,and the function of part modules is initially realized. Moreover, the key technologies of data collection, resource management and intrusion detection is especially studied. Finally, it sums up the main studies done in this paper, analyzes the deficiencies of the current model, and provides solutions for future improvement.