Randomly roving agents for intrusion detection

Agent based intrusion detection systems IDS have advantages such as scalability, recon gurability, and survivability. In this paper, we introduce a mobile-agent based IDS, called ABIDE Agent Based Intrusion Detection Environment. ABIDE is comprised of various types of agents, all of which are mobile, lightweight, and specialized. The most common form of agent is the DMA Data Mining Agent, which randomly moves around the network and collects information. The DMA then relays the information it has gathered to a DFA Data Fusion Agent which assesses the likelihood of intrusion. As we show in this paper, there is a quanti able relationship between the number of DMA and the probability of detecting an intrusion. We study this relationship and its implications. NRL CHACS Tech. Report 5540-TM 02 003. An abbreviated version of this paper appears under the

• Type: Conference
• Year: 2001
• Where: DBSEC
• Authors: Ira S. Moskowitz, Myong H. Kang, LiWu Chang, Garth E. Longdon
• Keywords: Agent Based Intrusion, DBSEC 2001, DBSEC 2007, Intrusion Detection, Intrusion Detection Systems