Distributed Intrusion Detection Framework based on Autonomous and Mobile Agents
Dalila Boughaci, Habiba Drias, Ahmed Bendib, Youcef Bouznit, Belaïd Benhamou · 2006
Implementation of intrusion detection systems with agent technology is one of the new paradigms for intrusion detection for computer systems. In this paper, we propose a distributed intrusion detection framework based on autonomous and mobile agents. In this framework, the mobile agent platform "aglets" is utilized. The system has five types of agents: administrator agents, analyzer agents, connection agents, crisis agents, and update behavior agents. These agents interact with each other to perform the detection task. We also discuss the implementation issues about our system