Research On The Technology Of Agent-based Peer Distributed Collaborative Intrusion Detection

Nowadays with the rapid development of Internet the problems of network security are becoming more and more critical. Increasing knowledge of the attacker, maturing variety of automation tools, as well as more complex and detailed methods of attack, making a simple firewall policy has been unable to meet current needs. So the defense of network needs to be deeper and more multiplex. Under this situation,as a kind of active measure of information assurance,IDS finds the intrusion from the trace and pattern of intrusion actions. It acts as the effective complement to the traditional protection techniques. It has become the focus of network security research.This paper analysed intrusion detection techniques and proposed a mobile agent-based peer distributed collaborative intrusion detection system. The system has integrated P2P and the mobile agent technology and implements data analysis and response coordination. The framework makes use of the properties of mobile agents such as mobility, flexibility, adaptability, operating in helerogeneous environments, reusing code to overcome a number of shortcomings of currently deployed IDS, such as lack of efficiency, lack of portability among monitored environments, limited flexibility(includes scalability and dynamic reconfiguration), limited upgradabitity, etc. It might enhance the distributed intrusion detection system's efficiency and accuracy, and it. This paper shows a scheme on data sniffing,data analysis, and response for the further study and made a beneficial attempt to the application of mobile agents technology in the IDS.