Research On Distributed Intrusion Detection System Based On JXTA

Internet applications and scale expansion of computer networks, distributed computing environment, the rise of mass storage and high-bandwidth technology, the traditional intrusion detection system cannot meet the current demand for net-work security. Distributed intrusion detection system has become the focus in the intrusion detection and even in the entire network security, it can resolve the cur-rent network security issues, for providing a favorable support of a building high quality, high stability, high reliability, the safety. For the expanding and complex of network, distributed intrusion detection system has become a hot academic re-search now.In this paper, for the existing flaws of DIDS in distributed detection, DIDS model based on JXTA is given, while enhancing the data ability and improving t-he data detection rate, especially for large-scale distributed network attacks. This article research the existing problems in distributed intrusion detection, and imp-rove system of communication security, share data between each modules, mutu-al cooperation through the research. The main study of the thesis are:(1) The Distributed Intrusion Detection System based on JXTA is given, and describe the structure of each functional module, use safety features on JXTA platform, re-cut the network structure, put the JXTA peer group into intrusion detection in order to improve the security of the entire system.(2) Summed up the existing characteristics of the distributed IDS, research the distributed intrusion system based on JXTA, give the system structure on the JXTA platform from different angles, analyze the intrusion detection rules and the alarm mechanism of analyzer, in order to improve the speed of matching rules and the accuracy of alarm.(3) Detector and analyzer is researched, and study work flow both of them and implement the normal work on the JXTA platform. In summary, the paper is studied of distributed intrusion technology on JXTA platform to distributed network environment. It is able to better fulfill its mission in distributed network and improve the efficiency of detection intrusion system after testing.