【摘要】 随着网络技术的不断发展,网络安全问题十分突出。入侵检测技术作为安全防护的重要手段,显得日益重要。大多数入侵检测系统存在误报率高和漏报的问题。此外,由于系统分布在网络的不同位置,不能进行必要的协同工作。针对上述问题,提出一种基于多代理的分布式入侵检测系统模型MADIDS。该系统在我们已有的多代理协同工作平台NHMAS上开发完成,结合基于主机的入侵检测系统和基于网络的入侵检测系统的优点,对常用入侵手段具有较高的检测率和较低的误报率。更多还原

【Abstract】 With the development of Internet, Network security problem becomes emergent. As an important measure, intrusion detection technical seems necessary. The current works have the defect of high false alarm and false negative rates. Furthermore, systems are distributed in different cites and cannot works in cooperation. This paper presents a multi-agent base distributed intrusion detection system model-MADIDS. It is developed on our multi-agent coordination platform-NHMAS and combines merits of both HIDS and NIDS. It has a relative high detection rate and low false alarm rate to common intrusion measure.更多还原