一种基于移动Agent的分布式入侵检测系统模型MABDIDS  

A mobile agent based distributed intrusion detection system model MABDIDS

作　　者：黄爱民[1] 傅光轩[1] 

机构地区：[1]贵州大学计算机网络研究所,贵州550025

出　　处：《网络安全技术与应用》2005年第6期20-23,共4页Network Security Technology & Application

摘　　要：分析了当前的入侵检测技术的发展及存在的主要缺陷,介绍了移动Agent的概念及其优点,提出了一种新的基于移动Agent的分布式入侵检测模型MABDIDS。MABDIDS利用移动Agent的优点,设计了针对主机和网络两种环境而分别具有不同运行机制的两种检测主体,通过将多个监控节点组织成层次结构来协同实现分布式入侵检测,解决了当前分布式入侵检测系统中存在的主要问题。The development of intrusion detection technologies and the existent questions were analysed in this paper. The concept and the advantages of mobile agent were introduced. A new Mobile Agent Based Distributed Intrusion Detection System model MABDIDS was proposed. This model designed two detection entity which have different behavior mechanisms aimed at host and network environment. And it organized the surveillant nodes into hiberarchy. By these measures, MABDIDS performed the distributed intrusion detection and solved the main problems of distributed intrusion detection nowaday.

关 键 词：网络安全 MABDIDS 分布式入侵检测模型 防火墙 计算机网络 AGENT 人工智能 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP18[自动化与计算机技术—计算机科学与技术]