Mobile Agent-Based Active Monitoring of Computer Networks

基于移动代理的计算机网络主动监控

• 批准号: 0087514
• 负责人: Anand Tripathi
• 金额: $ 26.68万
• 依托单位: University of Minnesota-Twin Cities
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-09-01 至 2005-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0087514&HistoricalAwards=false
• 关键词: Mobile; Agent; Based; Active; Monitoring

The mobile agent technology offers many novel capabilities for building future generation systems for monitoring and management of large networks. The goal of this research is to investigate and build a system infrastructure using mobile agents for active monitoring of large distributed systems. Mobile agents would be used to perform remote information filtering and control functions, and such distributed and mobile agents could be securely modified to change their monitoring policies and functions. If needed, new agents could be installed at a node to perform functions different from the existing ones. The system would also support use of agent groups for cooperative distributed monitoring and collaborative filtering of monitored information.The proposed infrastructure would provide a set of basic agent types for event monitoring, subscription, and information correlation and filtering. This infrastructure would support experimentation's with different schemes for monitoring, dissemination, and processing of event data. We would develop monitoring functions for different operating system platforms, such as Sun OS, Linux, and Windows NT. We propose to experiment with intrusion detection techniques using this infrastructure. We plan to use logic programming techniques for performing search and correlation operations on event data. The event notification data would be stored in logic databases using Prolog. Mobile agents would be used for performing filtering and correlation functions on data stored in such databases at different nodes.Security and robustness of operations would be an important design requirement for this infrastructure. This system infrastructure would include mechanisms to monitor its own components and perform recovery actions on detecting any failures. We would also develop a security architecture for mobile agents to execute in separate protection domains and at different security levels to minimize the impact of any corrupted or compromised agents.The proposed system would be deployed in the research and instructional computing labs at the University of Minnesota to evaluate the effectiveness of its mechanisms. This system would be implemented using the Ajanta agent programming system. For this purpose, the capabilities of the Ajanta system would be enhanced to support secure agent groups and debugging facilities for large-scale agent based programs. This monitoring infrastructure would be made available to the community for research and education activities.

移动的代理技术为构建下一代大型网络的监控和管理系统提供了许多新的功能。 本研究的目标是调查和建立一个系统的基础设施，使用移动的代理主动监测大型分布式系统。 移动的代理将用于执行远程信息过滤和控制功能，并且可以安全地修改这种分布式和移动的代理以改变其监视策略和功能。 如果需要，可以在节点上安装新的代理，以执行与现有代理不同的功能。 该系统还将支持使用代理组进行协作分布式监测和协作过滤被监测信息。拟议的基础设施将提供一套基本代理类型，用于事件监测、订阅以及信息关联和过滤。 该基础设施将支持实验的不同方案的监测，传播和事件数据的处理。 我们将为不同的操作系统平台开发监控功能，如Sun OS、Linux和Windows NT。 我们建议使用这个基础设施的入侵检测技术进行实验。 我们计划使用逻辑编程技术对事件数据执行搜索和相关操作。 事件通知数据将使用Prolog存储在逻辑数据库中。 移动的代理人将用于对存储在这些数据库中的数据执行过滤和相关功能。操作的安全性和稳健性将是这个基础设施的重要设计要求。 这一系统基础设施将包括监测其自身组成部分的机制，并在发现任何故障时采取恢复行动。 我们还将开发一个安全体系结构的移动的代理执行在不同的保护域和不同的安全级别，以尽量减少任何损坏或妥协agents.The建议的系统的影响将部署在明尼苏达大学的研究和教学计算实验室，以评估其机制的有效性。 该系统将使用Ajanta代理编程系统来实现。 为此，Ajanta系统的能力将得到增强，以支持安全的代理组和调试设施的大规模代理程序。 这一监测基础设施将提供给社区用于研究和教育活动。