基于有色Petri网和移动Agent的网络入侵检测系统

(IntrusionDetectionSystemIDS)AgentPetri(ColouredPetriNetCPN)PetriAgent(MobileAgent)1PetriPetri(PetriNetPN),PetritokenPetritokenPetriPetriPetritokentokentokentokentokentokentokenPetriFTPBounceUnixRSHAFTPBARSHB(1)shellFTPB(2)FTPshellA514(RSH)11FTP_BOUNCE(1975)2002-09-02PetriAgent(430079)PetriAgentPetriAgentNetworkIntrusionDetectionSystemBasedonCPNandMobileAgentLIANGYi,ZHOUJianguo,YANPuliu(CollegeofElectronicandInformation,WuhanUniversity,Wuhan430079)AbstractAmothodaboutColouredPetrinetisintroducedtomodelingtheactionofnetworkintrusiondetectionandisimplementedbymobileagenttechnology.Allthesystemhasthecharacteristicofstrongmatchingability,goodexpansibilityanddistributedcomputation.KeywordsColouredPetrinet;Mobileagent;Intrusiondetectionsystem2916Vol.2916ComputerEngineering20039September2003TP393.0810003428(2003)16010603A106FTP_PORT(21)FTP(B)FTP_DATA_PORT(20)1:PORT$RSH_IP,2,22:200portcommandsuccessful3:RETR$Filename6:completeRSH_PORT(514)RSH(A,RSH_IP)4:TCP_LINKRequest5:FILEDownloadFTP(FTP_PORT)PORT$RSH_IP,2,2(1)FTPIP(IP$RSH_IP2x2562514)(2)RETR$Filename(3)$FilenameshellFTP(FTP_DATA_PORT)RSHRSH_PORT(4)shellRSH(5)(6)(3)A514BshellAroot22Petri22FTP_BOUNCEPetri2tokenFTPRSHtokenPetriFTP(FTPPLACE)RSH(RSHPLACE)PORTTCPPORTtokenFTPT1tokenT1T1FTPPORTT1P1tokentokenP1T2P1FTPtokenT1P1tokenFTPRETRT2FTP_BOUNCE3P2tokenFTPRSHtokenRSHP2RSHtokenT3T3P4tokenFTP_BOUNCEPetri32PetriAgentAgentAgentAgentAgent(AgentServer)AgentAgentAgentAgentAgentAgentPetriAgentPetri3FTPRSHP1P2P2token1073FTP_BOUNCEPetriAgentAgent34FTP_BOUNCEAgentAgentAgentAgentAgentAgentAgentAgentAgentAgentAgent()tokenAgentAgenttokentokenAgentAgentAgentAgentAgentAgentAgenttokenAgenttokenAgentAgent:(1)AgentAgentAgentAgentAgent(2)(3)3PetriAgent,1,..(),2001,(4):77-802StevensWR.TCP/IP(1).:,20003SlagellM.MAIDSDesignandImplementation.://~kjensen/papers_books/rec_papers_books.html5.Petri.:,1998(99)6ToyamaK,KrummJ,BrumittB,etal.Wallower:PrinciplesandPracticeofBackgroundMaintenance.InInternationalConferenceonComputerVision(1999)7MarcenaroL,GeraG,RegazzoniC.AdaptiveChangeDetectionApproachforObjectDetectioninOutdoorScenesUnderVariableSpeedIlluminationChanges.EuropeanSignalProcessingConference,Eusipco2000,Tampere,Finland8CucchiaraR,GranaC,PiccardiM.ImprovingShadowSuppressioninMovingObjectDetectionwithHSVColorInformation.Proc.ofITSC',2001108AgentT1AgentAgentAgentP1P2FTP&RSHPLACEAgentT1FTP&RSHPLACET2T2PetriAgentAgent