Abstract: Most traditional intrusion detection systems adopt the analysis engine of the concentrating type, so it is already difficult for them to meet the extensive security demand of the distributed network environment. An autonomousagentbased adaptive distributed intrusion detection system was proposed to solve these problems. A honeypotbased distributed intrusion detection system was proposed to solve the higher rate of false negatives in most models. Moreover a detail description was given to the architecture and work mechanism of the model, and the character of the model was analyzed.

Key words: network security, intrusion detection, agent, honeypot