具有学习机制的分布式入侵检测系统研究

在对现有入侵检测研究的相关工作进行了总结的基础上,构建了一个基于Multi-agent的分布式入侵检测模型(distributedintrusiondetectionmodelbasedonmulti-agent,DIDMMA).该模型使用Agent技术,中间件技术搭建系统平台,并提供了基于主机和基于网络的入侵检测组件接口,能够确保系统中不同种类的Agent之间的协作顺利完成.

Distributed Intrusion Detection System with Learning Mechanism

Coordination theory is used to establish communication estimation mechanism, which can evaluate the possibility of attack between Multi-agent with intrusion detection alarm level coming from different nodes. Accordingly the fusion of agent technology and neutral network technology is discussed to some degree. On this condition, an experimental system to do some experiments is developed. As the result demonstrates, the system can implement distributed intrusion detection system and this system is of ability of learning as well. Finally, the authors propose the plan for next step of the research and how to consummate this IDS step by step.