A prototype multiAgent network security system

Distributed Internet-based attacks on computer systems are becoming more prevalent. These attacks usually employ some form of automation and involve the compromise of many systems across the Internet; systems which are not necessarily owned by the same company or individual. The information needed to detect and neutralize these attacks is spread across many machines. A system administrator who wishes to detect and handle these distributed attacks must constantly monitor his systems and communicate with other administrators around the world-a challenging task. In this paper we present our design and implementation of a multi-agent system, built using FIPA-OS, in which agents responsible for different network realms communicate with each other in order to determine if certain suspicious events are actually part of a distributed attack, and to warn each other about possible threats. Categories and Subject Descriptors I.2.11 [Computing Methodologies]: Artificial Intelligence— multiage...

• Type: Conference
• Year: 2003
• Where: ATAL
• Authors: Taraka Pedireddy, José M. Vidal
• Keywords: ATAL 2003, Internet-based Attacks, Multiagent Systems, Systems