Abstract:Real-time intrusion detection under current network environment exists the following problems: first, the scale of network is large, and a great deal of information needs to be processed, which requires large throughput to the intrusion detection system (IDS); second, the network environment is complex, and the data type is multiplex, accordantly, the intrusion detection system should has high accuracy. Aiming at these problems, a model of intrusion detection system was proposed. The model uses the distributed architecture based on multi-agent system and shows good expansibility, and can self-adjust according to the scale and bandwidth of network. The model uses technologies of anomaly intrusion detection and misuse intrusion detection together, and has low false alert rate and miss alert rate. Multi-attribute data abstraction is used in the model to grasp the feature of intrusion accurately and provide strong support for intrusion identification. The classifier is constructed with radial basis function (RBF) so as to have good extension to unknown intrusions, and can do effective judgment to unknown intrusions. Experimental results show that the system has large throughput and high accuracy, thus it is suitable for current network and has good practicability.

Proactive Intrusion Detection Model Based on Autonomic Computing

An Autonomic Intrusion Detection Model with Multi-Attribute Auction Mechanism

On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

Multi-agent based hybrid Intrusion detection system

An Adaptive Intrusion Tolerance Model Based on Autonomic Computing

Autonomic Intrusion Tolerance System Model

Multi-agent system based autonomic computing environment

Network Security Situation Awareness Model Based on Autonomic Computing

A New Rational Model Of Agent For Autonomic Computing

Conceptual Model and Realization Methods of Autonomic Computing

Research on Dynamic Adaptive Intrusion Detection Model

PD-Agent: A Flexible Agent BDI Model for Autonomic Computing

A New System of Management Technology for Autonomic Computing

Intrusion Detection System Model Based on Multi Detection Technology

Design and Implementation of Adaptive Intrusion Detection System Based on Web Access Behavior Relevancy

State-Based Generalized Autonomic Computing Models

Adaptive Distributed Intrusion Detection Using Parametric Model

A Host-based Multi-layer Intrusion Detection Model and Its Detection Methods

Dynamic Defense Security Model for Network Perimeter

Autonomic and Dependable Computing: Moving Towards a Model-Driven Approach

Intrusion Detection Scheme for Autonomous Driving Vehicles