MONI: Mobile Agents Ontology based for Network Intrusions Management

摘要

We address ourselves in this paper to the issues of organisation, representation, management and operational use of knowledge in network-based IDS and IPS to reduce the number of false positives and false negatives in these systems. Our approach is based on a Network Intrusion Management - Centric Ontology Model (NIM-COM) for structuring knowledge in order to make the knowledge of systems more complete, generic and reusable. NIM-COM implements a set of concepts NIDS/NIPS need to manipulate to obtain efficiency. We propose MONI (Mobile Agents Ontology based for Network Intrusions Management), a Multi-Agent System for operating knowledge base constructed on the NIM-COM.