【摘要】 介绍了一种基于自治代理的网络入侵检测模型,它包括一个中心控制级代理检测模块,多个主机级代理检测模块和网络代理检测模块。各模块间通过代理协同工作以实时检测网络中的协同攻击。为了实现代理间的可靠、安全通信,利用XML作为信息交换的载体,实现代理间的数据交换。更多还原

【Abstract】 An Agent-based Network Intrusion Detection Model is introduced. It consists of the following components: a host manager (a monitoring process or collection of processes running in background) in each host; a network manager for monitoring each net in the system; and a central manager which is placed at a single secure location and receives reports from various hosts and net managers to process and correlate these reports, and to detect intrusions. By the cooperation of agents, the cooperative attack in the net can be detected.A data exchange method using XML (Extensible Markup Language) technology is also introduced to realize the secure communication between agents.更多还原