Multi-Agent network security audit system based on information entropy
Lu Taoxia, Liu Peiyu · 2010
Because of the confidential and important information contained inside the local area network (LAN) of the companies or government departments, the network interior's security problem highlights gradually. On the basis of the fact that firewall and intrusion detection systems can not effectively protect the security in LAN, this paper proposes a multi-Agent network security audit system model, and at the same time, an improved detection algorithm based on information entropy is introduced into the audit system. During the system's running time, the improved algorithm is used to simulate and detect the DDoS attack. The experiment results prove that the multi-Agent system running in LAN can audit part of the intrusion effectively and improve log data analysis intelligence.