A DDoS-Aware IDS Model Based on Danger Theory and Mobile Agents

摘要

Most of the security problems in large and distributed information systems are vastly complex. Few research on detection of burgeoning Distributed Denial of Service (DDoS) attacks, leads us to expand our perspectives to a comprehensive architectural approach in which particular issues like arrangement and communication of system components appear. In this paper, many useful ideas from the behaviour of biological immune systems are elicited based on the results of the latest immunological researches, especially Danger Theory. They are applied to create a model for immunization of distributed intrusion detection systems (IDSs) that are resistant to DDoS. Although a general model for various IDSs is proposed and implemented in this research, a particular simulation scenario for detecting DDoS in a Wireless Sensor Network (WSN) is planned as an example to assess the general ability of the proposed model in detecting undesirable events.