SAPA: software agents for prevention and auditing of security faults in networked systems

Authors:
Rui Costa Cardoso;Mário Marques Freire
Affiliations:
Department of Informatics, University of Beira Interior, Covilhã, Portugal;Department of Informatics, University of Beira Interior, Covilhã, Portugal
Venue:
ICOIN'05 Proceedings of the 2005 international conference on Information Networking: convergence in broadband and mobile networking
Year:
2005

Citing 7
Cited 0

Managing Vulnerabilities in Networked Systems

Computer
Agent Communication Languages: The Current Landscape

IEEE Intelligent Systems
Design of Network Security Control System for Cooperative Intrusion Detection

ICOIN '02 Revised Papers from the International Conference on Information Networking, Wireless Communications Technologies and Network Applications-Part II
A prototype multiAgent network security system

AAMAS '03 Proceedings of the second international joint conference on Autonomous agents and multiagent systems
Computer attack trends challenge Internet security

Computer
Intrusion detection: a brief history and overview

Computer
Network intrusion and fault detection: a statistical anomaly approach

IEEE Communications Magazine

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper describes the design and implementation of a multi-agent system to detect and audit host security vulnerabilities. The system uses agent platforms allocated through the network to scan and interact with each host. The information collected by each agent is then used to build a common knowledge base that together with data retrieved from vulnerabilities information sources is used to improve the overall security. This approach reduces the total time to scan the network and the processing time overhead associated. The amount of traffic involved is also reduced. It allows the dissemination of updated knowledge about the network security status and reduces the communication with the network administrator. This solution provides an autonomous and proactive distributed system. It acts as a vulnerability assessment tool to make security notifications only if needed.