A Research On The Distributed Intrusion Detection System Based On Mobile Agent

With the development of the Internet in the modern society, invasion, service refusal attack and abuse of the Internet resources are also inoperable, which makes the Internet safe of computers stand out and becomes a core question of information construction. To the development of large-scale Internet and invading complication, the traditional Internet safe technology exposes lots of defect.Firstly, by lots of studing on the IDS technology, in the paper development and background of IDS are introduced, as well as the main problem and the trend of intrusion detection are also analyzed. Due to the advantages of the Mobile Agent, the paper proposes an Intrusion detection system based on Mobile Agent. Although the unique independence, mobility of Mobile Agent can improve the haleness, tolerable ness, adaptability and expansibility of the intrusion detection system, it is necessary to improve on the intrusion detection system which based on Mobile Agent for still questions faced the intrusion detection system. Based on the IDS the paper also proposes an improved Genetic algorithm to detecte the abnormal attacks.Secondly, after analyzing the intrusion detection system of Mobile Agent, this system model is constructed by one Management Control Center(MCC) and controlled hosts.the MCC is deployed in one control server to manage the Agents (including Data Collection Mobile Agent (DMA), Intrusion Detection Mobile Agent (IDA), Status Mobile Agent (SMA) and Obersever Mobile Agent ObeserMA). IDA is the most important Agent; the paper implements it with improved GA to detect abnormal intrusion. At the same time, the paper gives the way to collecte data and how to define rules of the coding used by GA, and how to recognize the abnormal activity. Another, in the IDS also brings in the misuse detection unit to collaborate with the abnormal detection in order to improve the system ability.At last, the intrusion detection system of Mobile Agent is designed and implemented, the validity of which is proved by experiment at aspects of integrality, expansibility.