A Model of Multi-Agent Network Security Audit Combined with Information Entropy
Guo Hong-yan · Journal of University of Jinan · 2011
On the basis of the current audit system which is not intelligent in analyzing log data and the heavy burden disadvantage caused by its centralized architecture,a model of multi-agent network security audit in LAN is proposed.At the same time,an improved information entropy detection algorithm is applied into network attack agent of the model.In practical conditions,the DoS attack is simulated to invade a host in LAN which can be detected and defended successfully in time.The result shows that the model can effectively audit part of the intrusion and also improve audit efficiency and log data analysis intelligence.