基于多主体的分布式网络入侵检测系统  

DISTRIBUTED NETWORK INTRUSION DETECTION SYSTEM BASED ON MULTI-AGENT

作　　者：张红[1] 陆谊[1] 

机构地区：[1]广东仲恺农业技术学院计算机系,广东广州510225

出　　处：《计算机应用与软件》2007年第10期29-30,71,共3页Computer Applications and Software

基　　金：国家自然科学基金(70272002)的资助。

摘　　要：随着网络入侵行为变得越来越普遍和复杂,传统的单一入侵检测系统已不能满足网络安全的发展需求。针对当前形势,为了提高计算机及网络系统的防御能力,提出了一种基于多主体的分布式网络入侵检测模型,研究了基于多主体的分布式网络入侵检测系统。在对入侵检测系统的描述中,重点介绍了入侵检测系统功能、入侵检测系统框架、入侵检测系统工作流程和系统实现的关键技术。为了验证系统的有效性,对入侵检测系统进行了大量的测试。测试结果表明,入侵检测系统扫描网络花费时间不多,扫描结果准确率很高。Network-based attacks have become more common and sophisticated. For this reason, traditional intrusion detection system based on single layer can＇t meet the increasingly growing network security＇s requirement. In order to improve resistive capability of computer and network system,based on Multi-agent, a distributed network intrusion detection model and a distributed network intrusion detection system are presented. The function, the system framework, the operation flow and the key techniques are introduced. In order to prove the validity of this system,a large number of tests are carried out. The testing result suggests that the system is time-saving and of high accuracy.

关 键 词：网络安全 分布式入侵检测 多主体 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]