• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2007, Vol. 29 ›› Issue (3): 16-18.

• 论文 • 上一篇    下一篇

基于移动代理的入侵检测系统

李庆华 胡巍 廖翔   

  • 出版日期:2007-03-01 发布日期:2010-05-30

  • Online:2007-03-01 Published:2010-05-30

摘要:

本文针对传统入侵检测系统普遍存在的缺陷,充分结合移动代理技术,提出了一种基于移动代理的入侵检测系统模型。该系统能对单一主机、多台主机和整个网络进行多层次的检测,整个检测体系可以灵活、动态地配置和方便地扩展。另外,本文还着重讨论了系统部件出现失效时如何自动恢复,使系统更加稳定和可靠。

关键词: 入侵检测 移动代理 网络安全 容错

Abstract:

This paper presents a model of intrusion detection based on mobile agents according to the common shortcomings of traditional intrusion detection systems.This system has the capability of multi-layer detection on a single host,several hosts and the whole networks.The whole detection system can be conf igured dynamically and flexibly,and can be extended conveniently.In addition,this paper particularly discuss how to accomplish self-recovery from internal failures to enhance the stability and reliability of this system.

Key words: intrusion detection;mobile agent;network security;fault-tolerant