Agent Methods for Network Intrusion Detection and Response

While the need to build the Intrusion Detection Systems (IDS) based on on a distributed and cooperative (P2P) paradigm is being generally acknowledged, the field has been disconnected from the recent advances in the multi-agent research, most notably the field of trust modeling. Our contribution reviews recent implementations of IDS systems and presents them from an agent research perspective. We also identify the opportunities where the agent approaches can be successfully used. Agent techniques can make the IDS more adaptive, scalable and reliable while increasing their autonomy and reducing the maintenance requirements. Besides trust modeling, we propose that the distributed decisionmaking and planning techniques can be used to shorten the detection-response loop, making the system more robust while facing worm attacks.

• Type: Conference
• Year: 2007
• Where: HOLOMAS
• Authors: Martin Rehák, Michal Pechoucek, David Medvigy, Magdalena Prokopová, Jan Tozicka, Lukás Foltýn
• Keywords: Agent Research Perspective, Artificial Intelligence, HOLOMAS 2007, Intrusion Detection Systems, Trust Modeling