【摘要】 文章提出了一种基于Agent的入侵检测系统模型,该模型是一个层次结构,主要由监控中心Agent、评估分析Agent、信息收集Agent等组成。并对该系统模型最底层的基于网络Agent的设计与实现进行了研究,基于网络的Agent有数据报捕获模块、协议解析模块、规则分析模块、检测分析模块等组成。更多还原

【Abstract】 The distributed structural model of intrusion detection system based on Agent was presented the.The model is a layered structure,constituting of monitoring Agent,evaluation and analysis Agent,information collection Agent.The design and implementation of Agent in the lowest layer of the model were studied.Internet-based Agent mainly included modules for datagram of detection,agreement of analysis,and rule of analysis,measure of analysis etc.更多还原