基于移动Agent的层次模型IDS设计

摘要

入侵检测系统作为防火墙等技术的有效补充被广泛应用于实际当中，而传统的入侵检测系统存在一定的局限性．基于移动代理的入侵检测技术成为了分布式入侵检测研究领域的一个重要方向．分析了现有的入侵检测系统的不足，引入移动代理技术，设计了一种基于移动Agent的分布式层次模型入侵检测系统结构，以提高对可疑行为的分析和响应，有效地应对分布式入侵行为．%As one of the effective supplements of firewall technology intrusion detection system is widely used in practice, but the traditional intrusion detection system has some limitations. Intrusion detection system based on mobile agent has become an important direction in the research field of distributed intru sion detection technology. This paper analyzes the deficiency of existing intrusion detection system, intro duces the mobile agent technology,and thus designs a mobileAgentbased distributed intrusion detection system model structure,which can improve the suspicious behavior analysis and response and effectively deal with distributed intrusion behavior.