【作者】 黄爱民；

【导师】 傅光轩；

【作者基本信息】 贵州大学 ， 计算机应用技术， 2006， 硕士

【摘要】 随着计算机网络技术的迅猛发展以及各种建立在计算机网络上的业务的日益使用广泛，计算机安全问题显得越来越突出。人们在享受计算机网络带来的好处的同时，也强烈的感受到了各种计算机网络安全性问题带来的威胁，迫切需要一种有效的手段来保护计算机网络的安全。 本文首先介绍了计算机网络安全的概念、目标和安全模型，回顾了各种传统的安全技术及它们的优缺点；然后描述了入侵检测系统在安全防范体系中的作用，介绍了入侵检测系统的相关概念、研究现状和发展趋势；详细分析了移动代理的相关概念及它的特点；最后结合移动代理技术和分布式技术，提出了一种基于移动代理的分布式入侵检测系统模型。 论文的主要工作有： (1)分析了移动代理的特点； (2)对当前已经存在的基于移动代理的入侵检测系统模型的优缺点进行了分析； (3)深入学习了移动代理平台Aglet和信息收集工具Snort的规则及其插件原理。 (4)经过合理设计，结合移动代理技术和分布式系统的优点，提出了一种基于移动代理的分布式入侵检测系统模型MABDIDS，系统克服了当前的大多数入侵检测系统模型的实时性差、处理瓶颈、单点失效等问题，显著的提高了系统的整体检测性能； (5)对MABDIDS的关键模块进行了设计，给出了部分伪代码。更多还原

【Abstract】 With the rapid development of network technology and many operations based on network, the problems of network security are becoming more and more critical. The people are suffered by these problems hardly while enjoying the enormous advantages of network. So the methods which can protect the network security are needed extremely.This paper introduced the concepts, goals and models of network security at first, then analyzed the traditional security technologies and their merits and shortcomings. We discussed the effects of intrusion detection system in the framework of security. The concepts, the research conditions and developments of IDS(intrusion detection system) were introduced in detail. The perception and characters of mobile agent was summarized. A kind of mobile agent based distributed intrusion detection system model was proposed in the end.The main works in this paper are as follow:(l)The characters of mobile agent were explained.(2)Analyzed the advantages and the flaws of some IDS models based on the mobile agent technology.(3)Comprehend the aglet and the snort deeply.(4)A kind of mobile agent based distributed intrusion detection system model was proposed. This model integrated with the technology of mobile agent and distributed system. It can resolve the problems of IDS , such as real-time badly, the jar of execution and problems of isolated node.(5)Designed the key module and given the code.Some technologies of system implementation were discussed , including the develop skills of Aglet platform, the programming of snort rule and snort plungin, the mechanism of agent communication, the construction of the lib of user behavior based on host detection.更多还原