Applied Research On Mobile Agent Technology In The Distributed Intrusion Detection System

With the rapid development of computer network technology, and information technology popularization of greatly improved, a variety of attacks also pose a threat to the computer network, the safety of network security problem, make the construction of information network becomes a key problem. Intrusion detection system is a computer security system in a very important part of intrusion detection technology, using the system and network audit data for testing and analysis, found that invaded attempt, to adopt appropriate measures to protect them. But with the expanding of network size and attack methods increasingly complex trend, the traditional intrusion detection system increasingly exposed lack of applicability, validity and expansibility wait for blemish.In this paper, first, the computer network security and intrusion detection systems and other related concepts are described, and analyzes the domestic and foreign intrusion detection system development course and the present situation, summarizes the current intrusion detection system facing the main problems and the development trend.Secondly, the paper describes the mobile agent, including mobile agent technology related to the concept, characteristics, behavior, life cycle and mobile agent system structure, etc. This paper gives a through study will mobile agent technology and distributed combines the intrusion detection system model of open, because mobile agent unique mobility and autonomy, make whole intrusion detection system fault tolerance, adaptability and expansibility get improve greatly. This paper also aimed at model of data acquisition module, intrusion detection module, response module, data management module, monitoring control module, data query module part design scheme of the given detailed.Finally, design and realized based on mobile agent technology of intrusion detection system model, and the model in the simulation environment were tested, and verified the system in agency management ability, and intrusion detection rate the performance of the aspects of this system, confirming the safety performance and expansibility.