Based On The Research And Realization Of The Agent Model Of Intrusion Detection Systems Macaid

With the fast development of network technology, the network topologies become increasingly complex and the intrusion activities are getting more and more frequently. So the IDS(Intrusion Detection System) which is the necessary and useful addition to the firewall catches the experts' eyes in the field of network security.After the comparison with some IDS products, the paper presents a new IDS model -MACAID(Multi-Agent & CA for Intrusion Detection) with the ability of CA authentication appling to the distributed ,high-speed network nowadays, Whose main components are defined as idea of Agent. The system gathers data from machines and network, analyses the data by misuse technology and abnormal technology, adopts authentication and encryption technology to increase the stability of itself , also has the ability to co-operate with other security facilities. The paper also gives the detail designation of the components and the language used between them. In the end, it discusses a demo system built on the model.