A Mobile Agent and Snort Based Distributed Intrusion Detection System

Ye, Xiaoling; Zhang, Yingchao; Zhang, Chao-Long; Chen, Chao; Huang, Xinyi

doi:10.1109/wcse.2009.310

Cited by 1 publication

(1 citation statement)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Recently, Ye et al (Ye et al, 2009) introduced a distributed IDS based on the mobile agent technology and the open source tool SNORT. The proposed system permits data collection, analysis and response on the supervisory node and the results are analyzed by mobile agent.…”

Section: The Mobile Agent-based Idsmentioning

confidence: 99%

A Snort-Based Mobile Agent for a Distributed Intrusion Detection System

Brahmi¹,

Yahia²,

Poncelet

2011

Proceedings of the International Conference on Security and Cryptography

View full text Add to dashboard Cite

Abstract:Due to the rapid growth of the network application, new kinds of network attacks are endlessly emerging. Thus, it is of paramount importance to protect the networks from attackers. Consequently, the Intrusion Detection Systems (IDS) are quickly becoming a popular requirement in building a network security infrastructure. Most existing and commercial IDS are generally centralized and suffer from a number of drawbacks, e.g., high rates of false positives, low efficiency, etc, especially when they face distributed attacks. In this paper, we introduce a novel mobile agent-based intrusion detection system focusing on the misuse detection approach, called DIDMAS (Distributed Intrusion Detection using Mobile Agents and Snort). DIDMAS takes advantages of the mobile agent paradigm to implement an efficient distributed system, as well as the integration of existing techniques, i.e., the well-known IDS SNORT. Carried out experiments showed that our proposed system presents better performance as well as a good scalability compared to the pioneer known centralized IDS SNORT system over real traffic and a set of simulated attacks.

show abstract

Section: The Mobile Agent-based Idsmentioning

confidence: 99%