【摘要】 提出了一种使用移动代理的面向服务的分布式入侵检测系统模型SOIDS(Service-oriented Intrusion Detec-tion System).通过将服务和移动代理分布到网络上,SOIDS很好地解决了基于集中式框架的入侵检测系统面临的性能瓶颈问题.本文深入探讨了SOIDS的体系结构和消息机制,并以实例详细描述了代理和服务合作追踪检测入侵的流程.本文对实现网络安全系统的开放性,可扩展性和健壮性方面也进行了有益的探索.更多还原

【Abstract】 This paper presents a service-oriented intrusion detection system model by using mobile agents. By distributing services and mobile agents among network, SOIDS manages to settle the bottleneck problem of central detection infrastructure. The structure and the message mechanism among services and mobile agents of SOIDS are discussed here. The whole process of detecting and tracing intrusion by mobile agents and services is illustrated especially in detail. This paper makes active exploration and provIDes a good paradigm in enhancing the openness, extensibility, and robustness of network security system.更多还原