A safe mobile agent system for distributed intrusion detection

Abstract

Some applications of the technology of mobile agent (MA) in intrusion detection system (IDS) have been developed. MA technology can bring IDS flexibility and enhanced distributed detection ability. However, the security of mobile agents and methods of collaboration among mobile agents are important problems cared by many researchers. For that, we designed a security mobile agent system for distributed intrusion detection and implemented a prototype. In this paper, we firstly analyze the shortcomings of current IDSs and discuss the state of the art for applying MA technology in IDS. Then we present our MA-IDS architecture and detail methods of local intrusion detection and distributed intrusion detection. The structure and security architecture of MAs are expatriated emphatically in Section 3. Finally we demonstrate the advantages of our MA-IDS architecture and our future research contents.