Authors
Guy Helmer
Publication date
2002/6/7
Description
We have designed and implemented an intrusion detection system prototype based on mobile agents. Our agents travel between monitored systems in a network of distributed systems, obtain information from data cleaning agents, classify & correlate information, and report the information to a user interface and database via mediators.
Agent systems with lightweight agent support allow runtime addition of new capabilities to agents. We describe the design of our multi-agent intrusion detection system and show how lightweight agent capabilities allowed us to add communication and collaboration capabilities to the mobile agents in our intrusion detection system.