Cooperation modeling for intrusion detection system based on Multi-SoftMan
Zhanfei Ma, Xuefeng Zheng · 2009
At present, most of the intrusion detection systems (IDS) don't have enough flexibility, intelligentization and maintainability in actual application. Through studying and analyzing the intelligence recognition characteristics of ldquoSoftManrdquo (SM), a novel cooperation model for intrusion detection system based on multiSoftMan alliance (MSMIDS) is proposed to solve these problems. This paper discusses the concepts and various intelligence recognition characteristics in which SoftMan could be applied to the problem of detecting and responding to intrusions. At the same time, the paper visualizes the architecture and system behaviors of the multiSoftMan intrusion detection system. Relevant negotiation control process and cooperation control strategy are presented respectively. The experimental results show that MSMIDS is a more adaptive and efficient system. The purpose of the MSMIDS is to bring intelligent negotiation mechanism based on multiSoftMan alliance into cooperation system so as to improve the performance and cooperation control capability of the systems. In this way, the system will match the requests. MSMIDS also provides a novel way for implementation of network security system.