Mobile Agent Intrusion Detection System

Since ten years or so, with the fast advance of computer network technology, theusers of network have increased in the multiple of geometry and the attack mediumhackers hold renovate constantly. It is necessary and important to keep a sharp lookoutfor network security. The rapid development of network security is bringing aboutchanges day after day. For example: preventing virus software,passive firewallintrusion detection system of initiative, and so on.. But they are all their own defects.For easing the inflated flow of network and more and more resources in the possessionof operation systems, many safe products can't adapt to these kinds of changes becauseof their own defects.To solve these problems, we design an intrusion detection system based mobileagent, which has real-time character, scalability, flexibility and fault-tolerant ability forthe big flow network and large,different operation system.The paper designs the intrusion detection system based mobile agent, it is made upof data collection, data detection and real-time response. The module of data detectionincludes stationary agents and mobile agents. Stationary agents can detect data fromthe module of data collection in each monitored host. Mobile agents can be dispatchedfrom a central controller to carry out operations directly at the remote point of interest.These advantages of mobile agents can improve IDSs'performance and can ease theflow of network. The design of agents, the paper adopts CPN(Colored Petri Net) modelto describe behavior of intrusion and the relations of agents,which can enable betterassign task for agents, improving IDSs'efficiency and easing the load of network..With the design of agents, a basic intrusion detection system based on VoyagerORB is designed by JAVA in the end of the paper.