【摘要】 本文针对通用入侵检测系统的存在的缺陷,分析了Agent的特性,提出了一种基于智能Agent的分布式入侵检测系统模型。该模型利用Agent的移动、自治特性,将基于主机和基于网络的入侵检测结合起来,增强了入侵检测系统对分布式网络的协同检测能力,有效降低网络通信负荷,提高系统自身的安全性。文章阐述了该模型实现的关键技术并对系统性能进行了评价。更多还原

【Abstract】 The flaw of general intrusion detection system and the characteristic of intelligent agent are analyzed. A model of distributed intrusion detection system base on mobile agent is proposed. The model combines the two detection technologies based on host and network and enhances the security and collaborative detection capability. The article elaborates the key technologies and appraises the performance of the system model.更多还原