Preemptive distributed intrusion detection using mobile agents
Proceedings. Eleventh IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises - Trang 103-108
Tóm tắt
Distributed intrusion detection systems have many advantages over their centralized counterparts such as scalability, subversion resistance, and graceful service degradation. However, an important disadvantage is their inability to block packets immediately when an intrusion is detected To tackle this problem, we propose a network-based preemptive distributed intrusion detection system using mobile agents. Packets are diverted to various types of agents strategically placed over the network. Various agents perform tasks in control, detection, policy, and blocking. Suspect packets are blocked before they reach the destination when an intrusion is detected and the policy verdicts for blockage. Ways to mitigate negative impacts of our system on network traffic and latency are discussed.
Từ khóa
#Intrusion detection #Mobile agents #Scalability #Degradation #Collaborative work #Communication system traffic control #Delay #Security #Load management #MonitoringTài liệu tham khảo
0, Zonealarm
almgren, 2001, Application-integrated data collection for security monitoring, Recent Advances in Intrusion Detection 2001, 22, 10.1007/3-540-45474-8_2
mchugh, 2000, The 1998 lincoln laboratory ids evaluation a critique, Proceedings of the 2000 Recent Advances in Intrusion Detection, 145, 10.1007/3-540-39945-3_10
10.1145/306549.306571
axelsson, 1999, The base-rate fallacy and its implications for the difficulty of intrusion detection, Sixth ACM Conference on Computer and Communications Security, 1
1991, Information technology security evaluation criteria (itsec), ver 1.2, Tech Rep
jansen, 2000, Mobile agents in intrusion detection and response, 12th Annual Canadian Information Technology Security Symposium
0, Network intrusion detection system on mass parallel processing architecture, Phrack Magazine, �0b
de queiroz, 1999, Micael: An autonomous mobile agent system to protect new generation networked applications, Recent Advances in Intrusion Detection 1999
lee, 1999, A data mining framework for building intrusion detection models, Proceedings of the IEEE Symposium on Security and Privacy
1991, Dids (distributed intrusion detection system) — motivation, architecture, and an early prototype, Proceedings of 14th National Computer Security Conference
helmer, 2000, Lightweight agents for intrusion detection, Journal of Systems and Software
0, Norton personal firewall
1991, A system for distributed intrusion detection, IEEE Compcon Spring'91, 170
0, Manhunt
10.1016/S1389-1286(00)00136-5
0, Blackice pc protection