通過對現有多代理技術的分布式入侵檢測系統的研究，提出了一種基于多代理技
術可自檢的分布式入侵檢測系統模型，并且對該模型的結構，組成和代理的處理流程進行了描述，該模型是一個開放的系統模型，具有很好的可擴展性，易于加入新的入侵檢測代理及相應的自檢，也易于增加新的入侵檢測模式，代理之間的協同采用代理守護進程來實現。
關鍵詞：入侵檢測；代理/多代理；系統自身安全
Intrusion Detection System Based Distributed Model With Multi-agent Technique of Detection Owner Lv Jia-xiang , Li Yi-fa (Institute of Information Engineering, Information Engineering University, ZhengZhou 450002, China) Abstract: By dealing with the current intrusion detection system (IDS) with multi-agent technique. a based distributed system model with multi-agent technique of detection owner in presented, and its architecture, components and intrusion agent(IDS)processing flow chart are described in this paper, as well. This model is extended, as an open system, to which the new IDAs detection owner and ID modes can be easily added. Communications of these agents are realized by DEMON threads.
Key words: intrusion detection；agent/multi-agent；system security