摘要： 入侵检测和响应问题一直是诸多计算机科学家们努力去解决而又至今尚未完全解决的一个问题，该文引入数据挖掘技术和智能代理技术，提出了由传感器、检测器、数据仓库、模型生成器及分析机制等组成的体系机构。该机构能很方便地对大量特征数据进行存储、共享，使检测模型的生成、分发自动化，使大量异构数据的处理智能化，提高了入侵检测和响应的精确性、效率和速度。

关键词: 数据仓库, 数据挖掘, 智能代理, 入侵检测

Abstract: Intrusion Detection is an issue that computer scientists try to tackle without complete success. This paper introduces data mining and intelligent agent technology, presents an architecture consisting of sensors, detectors, data warehouse, model generators and analysis engines. This architecture facilitates the sharing and storage of audit data, automates the generation and distribution of new models, intelligentizes the handling of large, heterogeneous data, and improves the accuracy, efficiency and usability.

中图分类号: 

• TP393.08