基于Agent的分布式入侵检测系统研究

为了提高入侵检测系统在体系结构上的灵活性、提高入侵检测的速度,本文将Agent技术应用于入侵检测,探讨了基于Agent的入侵检测技术和模型。首先分析了网络安全及入侵检测系统的研究现状及发展趋势,以及入侵检测技术在网络安全中的重要地位和作用。在对入侵检测技术及Agent技术深入分析的基础之上,提出了一种基于Agent的入侵检测系统模型,研究了构成基本构架的各个子系统在整个模型中的作用及相互关系,给出了各自的设计实现方法,并重点讨论了基于Agent的分布式入侵检测系统模型的通信问题。

Research of DIDS Based on Agents

To enhance the flexibility of IDS architecture and detect intrusion effectively,we researched and applied the agent technology to the field of intrusion detection.Firstly,this paper discusses network security technology and basic concepts of intrusion detection including the necessity of and current situation and the development trend.Based on the in-depth analysis of intrusion detection and Agent technology,this article brings forward an Agent-based distributed intrusion detection system model and discusses the responsibility of each subsystem.Also,this paper discusses especially the communication problems of the Agent-based distributed intrusion detection system model.