Design and implementation of a misused intrusion detection system using autonomous and mobile agents
Dalila Boughaci, Kamel Ider, Sofiane Yahiaoui · 2007
This paper proposes a distributed intrusion detection system based on autonomous and mobile agents. The proposed system has four types of agents: connection agents, analyser agents, an administrator agent and a crisis agent. The system makes use of a Sniffer module to capture packets circulated on the network. A pattern matching approach is applied by the analyzer agents to scan the captured packets and detect eventual attacks. A prototype has been designed and implemented.