A novel distributed intrusion detection model based on mobile agent

Distributed intrusion detection is one of the most promising information security techniques. It is used to detect various attacks from distributed network environment. But attack behaviors are becoming more complicated with the development of network techniques so that it is becoming more difficult to detect them. In order to overcome the shortcomings of current intrusion detection techniques, a novel hierarchical model of multi-level detection intrusion is proposed. The model utilizes the intelligent, mobile and self-adaptive characteristics of agent and its distributed collaborative calculation capability. So it can detect complicated attacks effectively. The adoption of the clone and migration mechanism of agent and the security communication protocol enhances the security and collaborative detection capability of the model. communication load is reduced effectively and intrusions can be detected and responded as quickly as possible. The model can evolve and adjust itself dynamically to adapt to the external environmental change. The model is robust and scalable.