Intranet Security with Micro-Firewalls and Mobile Agents for Proactive Intrusion Response

  • Authors:
  • Muralidaran Gangadharan;Kai Hwang Hwang

  • Affiliations:
  • -;-

  • Venue:
  • ICCNMC '01 Proceedings of the 2001 International Conference on Computer Networks and Mobile Computing (ICCNMC'01)
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

We propose a distributed multi-level architecture to solve the Intranet security problem. The basic idea is to build micro firewalls on all hosts in the Intranet, as a second line of defense behind the gateway firewall. A distributed intrusion detection system (IDS) is developed to achieve proactive intrusion responses with dynamic policy changes. Mobile agents, CORBA,and RMI are evaluated for dynamic policy update. We find that mobile agents are most scalable and robust for policy update, but prone to attacks by other agents and hosts. CORBA has the best speed performance. The Java-based RMI has the highest security based onthe sandbox model. Key concepts, preliminary results, and continued research challenges are presented.