In order to overcome the disadvantages of the traditional distributed intrusion detection system, an application-layer distributed intrusion detection model based on the C/S mode is proposed here. The new model, is composed of a main system of server and several sub-systems of clients, fully utilizes detection abilities of the client by means of computing the belief dynamically, while the cost is not increased. Theoretical analysis and experimental results show that the model is a simple structure, reasonable design and higher accuracy than the traditional models.
An Application-Layer Distributed Intrusion Detection Model Based on the C/S Mode