一种基于MA 的分布式入侵检测系统研究

分布式入侵检测系统有许多优点，如可测量性和抗破坏性。然而，在具体实施过程
中存在着许多障碍。移动代理（MA）技术有着适合分布式入侵检测系统具体实施的许多特性。基于移动代理的分布式入侵检测系统利用移动代理技术同等地处理来自每台被监视主机的信息，然后完成对入侵行为的全局信息提取。本文深入分析了一种基于移动代理的分布式入侵检测系统。
[关键词]：分布式入侵检测 移动代理 网络安全

Research on a Mobile Agent-based Distributed Intrusion Detection System Wang Xia Chen Yunzhi College of Information Science and Engineering,Nanjing University of Technology,Jiangsu,Nanjing, 210009 Abstract：Distributed intrusion detection systems (DIDS) have many advantages such  as scalability, subversion resistance. However, there are some impediments when they are implemented. The mobile agent (MA) technology is of many features to suit the implementation of distributed IDS. MADIDS employs MA technology to coordinately process information from each monitored host, and then completes global information extraction of intruder actions. A MADIDA is analyzed thoroughly in this paper.
Keywords：Distributed Intrusion Detection; Mobile agent; Network Security