Intelligent Resilient Framework of Multi-SoftMan Intrusion Prevention System Model

摘要

SoftMan is a new concept based on production of distributed technique, agent, intelligent robot and artificial life, and its corresponding theory and technology fruits provide a good foundation and reference for studying the present intrusion detection systems (IDS). Inspired by the intelligence recognition capability of SoftMan , a novel Multi-SoftMan intrusion prevention system (MSMIPS) negotiation control model and relevant algorithm are presented and researched deeply for network security systems, which model is adopted distributed intelligence architecture. In order to reduce the relativity of each detection components as far as possible and avoid the simple point failure caused by the single central analyzer, the model is adopted the non-control center Multi-SoftMan architecture, which is used to SoftMan attributes, such as independence, activity, self-learning, self-adaptation, inheritance and variation, and so on. All of the components in model, such as data collection units, intrusion detection and analysis units, are independent, which has realized successfully the distributing data collection and the real-time detection and response. Therefore, the robustness of the system is enhancing, the distributing detection idea is realized really, and helps to improve intrusion detection efficiency, intelligentization and maintainability.