Research of Distributed Intrusion Detection System Model Based on Mobile Agent

Intrusion detection has become an important approach to solve the security problems. On the basis of analyzing the defects of the modern intrusion detection system and migrating with the technology of mobile agent, this article proposes a distributed intrusion detection system model based on agents. The function of each module in the system and the advantage of the whole system are described in detail. The proposed model adopts the architecture which has no control server and realizes the distributed detection and reaction really. Each component in the system independent and executes its function. The model is an open system with good flexibility and expansibility, and the problem of a single point failure is solved completely. Finally, the implementation, evaluation and future works are presented.