A new distributed intrusion detection method based on immune mobile agent

Authors:
Yongzhong Li;Chunwei Jing;Jing Xu
Affiliations:
School of Computer Science and Engineering, Jiangsu University of Science and Technology, Zhenjiang, China;School of Computer Science and Engineering, Jiangsu University of Science and Technology, Zhenjiang, China;College of Information Engineering,Yancheng Institute of Technology,Yancheng, China
Venue:
LSMS/ICSEE'10 Proceedings of the 2010 international conference on Life system modeling and and intelligent computing, and 2010 international conference on Intelligent computing for sustainable energy and environment: Part I
Year:
2010

Citing 6
Cited 1

Intrusion detection using autonomous agents

Computer Networks: The International Journal of Computer and Telecommunications Networking - Special issue on recent advances in intrusion detection systems
Kernel Based Intrusion Detection System

Proceedings of the Fourth Annual ACIS International Conference on Computer and Information Science
A Machine Learning Evaluation of an Artificial Immune System

Evolutionary Computation
Towards an artificial immune system for network intrusion detection: an investigation of dynamic clonal selection

CEC '02 Proceedings of the Evolutionary Computation on 2002. CEC '02. Proceedings of the 2002 Congress - Volume 02
Intrusion detection using sequences of system calls

Journal of Computer Security
Immune system approaches to intrusion detection --- a review

Natural Computing: an international journal

Review: An intrusion detection and prevention system in cloud computing: A systematic review

Journal of Network and Computer Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Intrusion detection system based on mobile agent has overcome the speed-bottleneck problem and reduced network load. Because of the low detection speed and high false positive rate of traditional intrusion detection systems, we have proposed an immune agent by combining immune system with mobile agent. In the distributed intrusion detection systems, the data is collected mostly using distributed component to collect data sent for processing center. Data is often analyzed in the processing center. However, this model has the following problems: bad real time capability, bottleneck, and single point of failure. In order to overcome these shortcomings, a new distributed intrusion detection method based on mobile agent is proposed in this paper by using the intelligent and mobile characteristics of the agent. Analysis shows that the network load can be reduced and the real time capability of the system can be improved with the new method. The system is also robust and fault-tolerant. Since mobile agent only can improve the structure of system, dynamic colonial selection algorithm is adopted for reducing false positive rate. The simulation results on KDD99 data set have shown that the new method can achieve low false positive rate and high detection rate.