Correlation in Distributed Intrusion Detection System Using Mobile Agent

摘要

This paper presents an architecture of a distributed intrusion detection system (DIDS) using Mobile Agent (MA).MA can invoke different agent( viz. Correlator agent, Filter Agent ).MA runs on top of Mobile Agent Platform. To manage uniformity on heterogeneous network, MAP works as virtual Machine. Correlator agent (CA) works as a means for the communication among the hosts and server in the network. MA invokes CA for sending rules that co-ordinate and responsible for determining whether some suspicious activities in different network nodes can be combined to be a distributed intrusion. Our implementation result justifies the architecture of the DIDS.