Dynamic, Cooperating Boundary Controllers
Dan Schnackenburg · 2002
This project has prototyped a preliminary design concept for a capability, enabling networks of networks to cooperate in the detection of system attacks, learn about the attack behavior, and dynamically reconfigure to protect the greater network infrastructure. This can be enabled by providing a mechanism for intrusion detection systems and boundary controllers to coordinate their actions. The focus of this concept has been to develop, implement and demonstrate an Intruder Detection and Isolation Protocol (IDIP) which can be used to track network intruders to their point of entry within the 'cooperating' network of networks, thus enabling network-level access control policies to be dynamically changed in response to the detected attacks.