Intrusion Detection Effectiveness Improvement by a Multiagent System.
Agustín Orfila, Javier Carbó, Arturo Ribagorda · LA Referencia (Red Federada de Repositorios Institucionales de Publicaciones Científicas) · 2005
Recent studies about Intrusion Detection Systems (IDS) performance reveal that the value of an IDS and its optimal operation point depend not only on the Hit and False alarm rates but also on costs (such as those associated with making incorrect decisions about detection) and the hostility of the operating environment. An adaptive multiagent IDS is proposed in this paper and it is evaluated according to a promising metric that take into account all these parameters. This paper shows results of a prototype that clearly point out how multiagent technology can improve IDS effectiveness.