基于分层结构和协作式代理的NIDS的研究与实现  

Network Intrusion Detection System Based on Hierarchical Structure and Cooperative Agent

作　　者：李涵[1] 杨波[1] 

机构地区：[1]济南大学网络中心,山东济南250022

出　　处：《济南大学学报（自然科学版）》2003年第1期18-20,共3页Journal of University of Jinan(Science and Technology)

基　　金：山东省自然科学基金(Y2001G09)资助项目

摘　　要：提出了一种基于分层结构和协作式代理的网络入侵检测模型,它包括三部分:一个中心控制级检测模块,多个主机级检测模块和网络代理级检测模块。它们之间通过代理协同检测网络行为,实现实时入侵检测。另外,还介绍了各部分之间的通信机制。The proposed architecture for this hierarchical intrusion-detection system consists of the following components:a host manager (a monitoring process or collection of processed running in background) in each host; a network manager for monitoring each net in the system;and a central manager which is placed at a single secure location and which receives reports from various hosts and net managers to process these reports, correlate them, and detect intrusions. These three components complete their communication through a kind of agent (namely, TransAgent).

关 键 词：网络安全 NIDS 网络入侵检测模型 分层结构 协作式代理 网络代理 通信机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]