MANET网络中一种基于移动Agent的入侵检测系统

摘要

提出了一种在MANET网络中基于移动Agent的人侵检测系统.介绍了系统的基础算法、体系结构以及工作原理.根据系统的基础算法得到数据报文的最佳传输路径,通过各节点的观察并结合其他节点的观察,判断可疑行为超出了预警范围时,发出告警信号,并采用绕路的措施;之后综合考虑来自各个节点的告警信号,得出最终可靠的结论,并从网络中彻底删除该节点.利用NS-2网络仿真工具模拟了黑洞、虫洞等人侵行为,以及系统对这些行为的对抗,仿真结果表明,本系统具有很高的效率和鲁棒性.%This paper presents an intrusion detection system based on mobile Agent for mobile ad hoc Networks. We introduce the basic algorithm, the system structure and the working theory of the intrusion detection system. The best route can be gotten by the routing algorithm. Learning from the local observed behavior and the neighbor reported behavior, if the rating of malicious behavior exceeds a threshold, the local node send the alert message and use the spare routing. Collecting the alert message from the other nodes, the node concludes the decision and deletes the malicious node from the network. We have done the experiment in simulated environment of NS2 system. We simulate malicious behavior as the black hole and the worm hole. The simulated results show that, the intrusion detection system is very efficient and robust.