摘要
本文针对传统入侵检测系统普遍存在的缺陷,充分结合移动代理技术,提出了一种基于移动代理的入侵检测系统模型。该系统能对单一主机、多台主机和整个网络进行多层次的检测,整个检测体系可以灵活、动态地配置和方便地扩展。另外,本文还着重讨论了系统部件出现失效时如何自动恢复,使系统更加稳定和可靠。
This paper presents a model of intrusion detection based on mobile agents according to the common shortcomings of traditional intrusion detection systems.This system has the capability of multi-layer detection on a single host,several hosts and the whole networks.The whole detection system can be configured dynamically and flexibly,and can be extended conveniently.In addition,this paper particularly discuss how to accomplish self-recovery from internal failures to enhance the stability and reliability of this system.
出处
《计算机工程与科学》
CSCD
2007年第3期16-18,共3页
Computer Engineering & Science
关键词
入侵检测
移动代理
网络安全
容错
intrusion detection
mobile agent
network security
fault-tolerant
