通過(guò)對(duì)現(xiàn)有多代理技術(shù)的分布式入侵檢測(cè)系統(tǒng)的研究，提出了一種基于多代理技
術(shù)可自檢的分布式入侵檢測(cè)系統(tǒng)模型，并且對(duì)該模型的結(jié)構(gòu)，組成和代理的處理流程進(jìn)行了描述，該模型是一個(gè)開放的系統(tǒng)模型，具有很好的可擴(kuò)展性，易于加入新的入侵檢測(cè)代理及相應(yīng)的自檢，也易于增加新的入侵檢測(cè)模式，代理之間的協(xié)同采用代理守護(hù)進(jìn)程來(lái)實(shí)現(xiàn)。
關(guān)鍵詞：入侵檢測(cè)；代理/多代理；系統(tǒng)自身安全
Intrusion Detection System Based Distributed Model With Multi-agent Technique of Detection Owner Lv Jia-xiang , Li Yi-fa (Institute of Information Engineering, Information Engineering University, ZhengZhou 450002, China) Abstract: By dealing with the current intrusion detection system (IDS) with multi-agent technique. a based distributed system model with multi-agent technique of detection owner in presented, and its architecture, components and intrusion agent(IDS)processing flow chart are described in this paper, as well. This model is extended, as an open system, to which the new IDAs detection owner and ID modes can be easily added. Communications of these agents are realized by DEMON threads.
Key words: intrusion detection；agent/multi-agent；system security