Based On The Agent Distributed Intrusion Detection System Analysis And Design

As the fast development of INTERNET,the network security problem is becoming more and more important. As the attackers are becoming mature,and the attack tools and ways are becoming various.The firewall strategy can no longer content the requirement.The defense of network need to be deep and multiplex.At the same time ,the network environment is becoming more and more complex.In this situation, intrusion detection techonolgy has become the focus point of network security research.This paper introduces the history ,the current research statusand the develp directions about intrusion detection technolgy.And this paper also introduces the standardization work of intrusion detection ,including CIDF and IDWG. .As the important of distributed intrusion detection technology,this paper introduces and analyzes the distributed intrusion detection system.And at the same time, it show us the current research about distributed intrusion detection system in the world ,and analyzes the different characteristics of them..On the basement of current research on intrusion detection technology,we design a prototype of Agent-based Distributed Intrusion Detection System, which is called A_DIDS. This prototype combines software agent technology and distribute technology.It is composed of Control Center Agent and Detection Agents. The control center agent manages the detection agents and detects some distributed attack events.The detection agents detect the intrusion on the network nodes.This prototype designs an architecture based on multi-agents's communication and collabroation. By the collaboration of these agents,we construct a hierachical defending system.