一种基于智能主体的分布式入侵检测系统设计与实现

摘要

Aiming at the problem of single point invalidation and the bottleneck of treatment ability in distributed IDS,a new distributed IDS based on intelligent agent is designed and implemented.The system uses the distributed architecture based on kinds of intelligent agents,and assembles these intelligent agents with the functional components from functional components pools to meet the needs of the intrusion detection.During treatment of the conjunctive information of invasion at tack features, IADIDS reduces the complexity of intrusion detection algorithms and improves the intrusion detection capabili ties.Through the system simulation, intrusion detection accuracy rate reaches to 96%,and the results show that its perfor mance is better than the other intrusion detection systems.%针对分布式入侵检测系统存在的单点失效和处理能力瓶颈问题,设计并实现了一种基于智能主体的分布式入侵检测系统.该系统基于多种智能主体的分布式结构,在进行入侵检测时,采用按需装配的方式,通过对入侵攻击特征信息中的关联信息进行处理,降低了入侵检测算法的复杂度,提高了系统的入侵检测能力.通过对该系统的仿真,入侵攻击检测准确率达到96％,结果表明其性能要好于其他的入侵检测系统.