Agent-based Distributed Intrusion Detection Technology

Along with the fast development and application of Internet, intrusion detection technology becomes more and more important. To enhance the flexibility of the IDS architecture and detect intrusion effectively, we researched and applied the agent technology to the field of intrusion detection. Firstly, this paper discusses the current situation and development trend of intrusion detection. Based on the in-depth analysis of intrusion detection and agent technology, this article brings forward an agent based distributed intrusion detection system model (ABDIDS). ABDIDS achieves some advances including flexibility, high speed and accuracy by using of agent technology. In the following part, this paper illustrates the architecture and responsibility of each subsystem. Also, this paper discusses especially two key problems of the agent based distributed intrusion detection system model (ABDIDS). namely communication and cooperation. At last, the paper summarizes the model and makes some ameliorative suggestion.