To overcome the interdependence between the traditional intrusion detection system components, high false-alarm rate of the duplicated ones from the same invasion, and the inability of adaptive replacement of algorithm for mining when testing environment changed, this paper puts forward an adaptive distributed intrusion detection system model based on Multi-Agent, whose mining algorithm module employs Joint Detection mechanism, while dynamic election algorithm for the recovery mechanism, which improves the system adaptive ability to the external changes.
Yang Bin LiuLiang ShiBei Zhan WangYuan Qin WuPan Hong Wang