Integrating Partial Models of Network Normality via Cooperative Negotiation: An Approach to Development of Multiagent Intrusion Detection Systems

  • Authors:
  • Francesco Amigoni;Fabrizio Basilico;Nicola Basilico;Stefano Zanero

  • Affiliations:
  • -;-;-;-

  • Venue:
  • WI-IAT '08 Proceedings of the 2008 IEEE/WIC/ACM International Conference on Web Intelligence and Intelligent Agent Technology - Volume 02
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Using agents for developing intrusion detection systems can provide several advantages, including configurability, adaptability, scalability, and robustness. Almost all works in agent-based intrusion detection have considered agents as elements that perform specific tasks in the intrusion detection process. In this paper, we propose a novel way of using agents to solve one of the most pressing problems in intrusion detection: the definition of an accurate model of network normality. We consider agents as associated to partial models of network normality that harmonize their conflicts via cooperative negotiation. Experimental results show that the proposed approach is promising.