Home > Table of Contents

Proceedings of the 2nd International Symposium on Web Information Systems and Applications (WISA 2009)

Nanchang, China, May 22-24, 2009

Editors: Fei Yu, Jiexian Zeng, and Guangxue Yue

AP Catalog Number: AP-PROC-CS-09CN001

ISBN: 978-952-5726-00-8 (Print), 978-952-5726-01-5 (CD-ROM)

Page(s): 72-75

A Novel Distributed Intrusion Detection Model Based on Immune Mobile Agent

           Yongzhong Li, Rushan Wang, JIng Xu

Full text:  PDF

Abstract

Intelligent and distributed is a development direction of intrusion detection system in future. However, current distributed intrusion detection system mostly use distributed component to collect data that are sent to processing center. Data is analyzed in the processing center. Nevertheless, these models have the following problems: bad real time capability, bottleneck, and single point of failure. In order to overcome these shortcomings, a new distributed intrusion detection model based on mobile agent is proposed in this paper. Intelligent and mobile characteristics of the agent are used to make computing move to data. Analysis shows that the network load can be reduced and the real time capability of the system can be improved with the new model. The system is robust and fault-tolerant. Because mobile agent only can improve the structure of system, dynamic clonal selection algorithm is adopted for reducing false positive rate. The simulation results on KDD99 data set prove that the new model has low false positive rate and high detection rate.

Index Terms

distributed intrusion detection,  mobile agent,  immune agent,  network security

Copyright @ 2009 ACADEMY PUBLISHER — All rights reserved