The research on automated intrusion response system based on mobile agents

This paper introduces a kind of automatic intrusion response system based on mobile agents. The system can generate a response plan automatically based on the intrusion report from the intrusion detection system, and implement the response plan automatically. The paper first introduces the system architecture, and then describes the methods of response analyzing, which includes the four-dimension response analysis model, and the, distributed response implementation. The system developed has been used in the dynamic network defense system of Jinhang network.