Mobile agent-based intrusion detection technology & system model research

宋明黎,温涛

DOI: https://doi.org/10.16208/j.issn1000-7024.2002.10.004

2002-01-01

Abstract:Mobile agent-based intrusion detection is a new intrusion detection technology developed in recent years. The paper mainly discusses the related concept, characteristic, basic structure and current researches of mobile agent-based intrusion detection system.

What problem does this paper attempt to address?

A Model for Intrusion Detection System Based on Mobile Agent

陆骏,王凯,吕志军,黄皓

DOI: https://doi.org/10.3321/j.issn:1002-8331.2003.28.051

2003-01-01

Abstract:This paper analyzes some shortcomings which are inherent in the current network-based IDS.Then it evaluates the benefits of applying mobile agent technology to the field of intrusion detection.Finally it proposes an intrusion detection system model,which is based on mobile agent technology.
On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

LIU Tong,WANG Ze-bing,FENG Yan

DOI: https://doi.org/10.3969/j.issn.1007-130x.2005.08.004

2005-01-01

Abstract:As the distributed intrusion becomes serious, the performance demand for distributed intrusion detection systems will be more and more important. In this paper, the concept of the Super-Peer intrusion detection model (SPIDM) is proposed. Furthermore, the technology of intelligent agent is implemented in this model. As a result, this efficient combination of distributed intrusion detection systems with the super-peer framework increases the system efficiency and collaboration, enhances the system openness, and thus improves the system performance as a whole.
A SURVEY OF MOBILE AGENT SYSTEM

Miao-liang ZHU,Yu QIU

2001-01-01

Journal of Computer Research and Development

Abstract:Mobile agent technology is a new distributed computation paradigm. With its potential power, the technology aroused a great interest and experienced a rapid development in the last ten years. Various mobile agent systems were made for different targets and were implemented in different means. It is necessary to explore the current mobile agent systems and to summarize the implementation technologies for further research. In this paper a comprehensive explanation of mobile agent systems is given. First the definition and peculiarities of mobile agents and mobile agent systems are stated. Its advantages are enumerated. Then eight representative mobile agent systems are surveyed and the design issues about mobile agent programming language, mobility, communication, fault tolerance and security are discussed. Finally, the deficiencies and the trends of mobile agent technology are pointed out.
Multi-agent based hybrid Intrusion detection system

张宝军,潘雪增,王界兵,平玲娣

DOI: https://doi.org/10.3785/j.issn.1008-973X.2009.06.004

2009-01-01

Abstract:Real-time intrusion detection under current network environment exists the following problems: first, the scale of network is large, and a great deal of information needs to be processed, which requires large throughput to the intrusion detection system (IDS); second, the network environment is complex, and the data type is multiplex, accordantly, the intrusion detection system should has high accuracy. Aiming at these problems, a model of intrusion detection system was proposed. The model uses the distributed architecture based on multi-agent system and shows good expansibility, and can self-adjust according to the scale and bandwidth of network. The model uses technologies of anomaly intrusion detection and misuse intrusion detection together, and has low false alert rate and miss alert rate. Multi-attribute data abstraction is used in the model to grasp the feature of intrusion accurately and provide strong support for intrusion identification. The classifier is constructed with radial basis function (RBF) so as to have good extension to unknown intrusions, and can do effective judgment to unknown intrusions. Experimental results show that the system has large throughput and high accuracy, thus it is suitable for current network and has good practicability.
Research on Agent-based Intrusion Detection Technique

WANG Jun,WANG Chong-Jun,XIE Jun-Yuan,CHEN Shi-Fu

DOI: https://doi.org/10.3969/j.issn.1002-137x.2006.12.017

2006-01-01

Computer Science

Abstract:Intrusion detection is a proactive network security protection mechanism, which has become a research focus in the field of the network security. Since the Agent-based intrusion detection systems have the features of the distributed coordination processing and intelligence, many researchers attach great importance to it and it has become a research trend for the next generation intrusion detection systems. In this paper, we first introduce the history of the intrusion detection systems (IDS)and its classifications. And then some recent research development that related to the key aspects of static Agent-based intrusion detection systems and mobile Agent-based intrusion detections systems are deeply explored. And their development treads are also given. In the end, we present some possible research directions and challenges for Agent-based intrusion detection systems.
Intrusion Detection System Model Based on Multi Detection Technology

TAN Min,HU Xiao-long,LIU Lian-chen

DOI: https://doi.org/10.16208/j.issn1000-7024.2008.07.055

2008-01-01

Abstract:In view of the weakness of current intrusion detection system and intrusion analysis method,a distributed fusing multi detection technology intrusion detection system model based on multi-Agent is brought forward.Apart from traditional analysis technology,file integrity analysis method based on mobile agent is added to the analysis Agent too.The model realizes the dist-ribution of intrusion detection,owns good scalability,improves the accuracy of intrusion detection,enhances the intrusion detection system's capability by using multi detection technology.So it can meet extensive security demand of the distributed network envi-ronment.
Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Yong-mei GAO,Ji-yi WU,Ling-di PING

DOI: https://doi.org/10.3969/j.issn.1673-629X.2009.08.039

2009-01-01

Abstract:Owing to many new characteristics such as central-less control and multi-hop communication,the security situation is more rigorous than that in the traditional Ad hoc network.Especially,when the number of nodes increase,the difficulty of building network,network availability and network security will be influenced badly.After the particular analysis of Sergio Marti's Watchdog and Pathrater arithmetic,intrusion detection system called SuperWatchdog,as the improved solution,was introduced to overcome the weakness of Watchdog.The main feature of the proposed system is its ability to discover malicious nodes which can partition the network by falsely reporting other nodes as misbehaving and then proceeds to protect the network.Simulation results show that our system decrease the overhead greatly,though it does not increase the throughput obviously.
The Mobile Agent Technology in Internet

李淑琴,王诚,蔡月茹

DOI: https://doi.org/10.3969/j.issn.1000-7024.2001.03.005

2001-01-01

Abstract:Mobile agent is a new distributed computing model. In this paper,we discuss the concepts, characteristics, compare with tradition technology hurdle, application related to mobile agent,and attempts to preset an account of current research efforts.
The Study of Mobile Agent Technology

董红斌,石纯一

DOI: https://doi.org/10.3969/j.issn.1002-137X.2000.04.016

2000-01-01

Computer Science

Abstract:Mobile Agent is a new distributed computing model. This articte introduces the concepts,origin,behavior,development language,general structure of mobile agent,and attempts to present an account of current research efforts.
Mobile Agent Based Distributed Intrusion Detection System Model Protecting from Attack

Ming-lei SHANG,Feng XU,Jing LU,Hao HUANG

DOI: https://doi.org/10.3969/j.issn.1000-1220.2005.09.015

2005-01-01

Abstract:To improve IDS'(Intrution Detection System) robustness in WAN,after analyzing several typical IDS models, MABDIDSM (Mobile Agent Based Distributed Intrusion Detection System Model) protecting from attack is presented in this paper. Mobile agent circles among the consoles in every LAN and collects intrusion events to manager center in MABDIDSM. These intrusion events are analyzed and processed in manager center.If manager center is paralyzed, mobile agent can elect new manager center from remainder consoles. Thus MABDIDSM is equipped with better capacity of protecting from attack in WAN.
Intrusion Detection Techniques for Mobile Wireless Networks

Yongguang Zhang,Wenke Lee,Yi-An Huang

DOI: https://doi.org/10.1023/a:1024600519144

IF: 2.701

2003-01-01

Wireless Networks

Abstract:The rapid proliferation of wireless networks and mobile computing applications has changed the landscape of network security. The traditional way of protecting networks with firewalls and encryption software is no longer sufficient and effective. We need to search for new architecture and mechanisms to protect the wireless networks and mobile computing application. In this paper, we examine the vulnerabilities of wireless networks and argue that we must include intrusion detection in the security architecture for mobile computing environment. We have developed such an architecture and evaluated a key mechanism in this architecture, anomaly detection for mobile ad-hoc network, through simulation experiments.

computer science, information systems,telecommunications,engineering, electrical & electronic
Intrusion Detection And Simulation For High-Speed Networks

Fei Yu,XiaoPing Dai,Yue Shen,Huang Huang,Miaoliang Zhu

DOI: https://doi.org/10.1109/ICSSSM.2005.1500110

2005-01-01

Abstract:The problem in network security presently is how to get real-time intrusion detection and alert. In the paper, we design Intrusion Detection System architecture and arithmetic again, meanwhile put forward an improved pattern matching arithmetic based on protocol analysis and theorization machine on Frete. New architecture can use network processor to collect and analyze data in network bottom, which enhance the speed and efficiency in Detection System.
On research and application of mobile agent technology

Jian Lü,Xianping Tao,Xiaoxing Ma,Hao Hu,Feng Xu

2005-01-01

Tien Tzu Hsueh Pao/Acta Electronica Sinica

Abstract:With the rapid development of the Internet and its on-top open application systems, how to develop a new software methodology becomes a challenge for software technology. This paper proposes the migration, communication and security mechanisms of mobile agent system, and discusses a self-designed and implemented mobile agent system Mogent. Moreover, the application of technologies and the system in the mainstream of software technologies, are investigated as well.
Research on Network Management Systems Via Multi-Agent Technology

李章维,张建明,王树青

DOI: https://doi.org/10.3785/j.issn.1008-973x.2004.08.001

2004-01-01

Abstract:For improving the stability, reliability, and convenient safeguard in network systems, a new method for network fault detection based on the network device running status was proposed. Using the feature of real network and SNMP(simple network management protocol) and TELNET(telecommunication network protocol), the realization of multi-agent network management systems was discussed. The network management system is characterized by rapid network fault detection, determination and treatment, which has intelligence and capacity for self-study, and also shortens the time of network fault (response) and treatment, thus the reliability of the network was improved. With the use of multi-Agent technology, the new way for studying network management has advantages of simple calculation, rapid fault detection, etc.
Researches on Mobile Agent System Security

赵进,袁春风

DOI: https://doi.org/10.3969/j.issn.1000-7024.2004.04.030

2004-01-01

Abstract:An overview of security problems in mobile Agent system is presented. Threats in mobile Agent system include varying attacks to Agents, Agent hosts and communication. The security objectives can be summarized in terms of confidentiality, auth-orization, accountability and availability. Later the security of two dominating mobile Agent programming language: Java and TCL is discussed. A series of measures are also given for countering the identified threats and fulfilling these security objectives.
Bargain Security Model Based on Mobile Agent

ZHANG Fei,CHEN Zi-chen,XIONG Li

DOI: https://doi.org/10.3969/j.issn.1006-5911.2006.10.012

2006-01-01

Abstract:To improve the performance and network security of collaborative commerce chain system and to deal with shortcomings of existing solution to electronic commerce,Mobile Agent technology was introduced into the modeling of network-based collaborative commerce chain system.Based on Mobile Agent properties,problems of security and network security confronted with Mobile Agent in the transaction process of network-based collaborative commerce chain were analyzed.Finally,a prototype system between the customer Agent and the supplier Agent was used to expatiate security negotiation bargain procedure based on Mobile Agent under the public key infrastructure and certification authority.Research results showed that Agent's submission permit to the supplier server during authentication process could enhance the network bargain security of the collaborative commerce chain system.
A Study of Key Security Threats and Countermeasures in Mobile Agent Systems

ZHANG Yang,CAO Ying-Chun,XIE Li

DOI: https://doi.org/10.3969/j.issn.1002-137X.2005.03.004

2005-01-01

Computer Science

Abstract:Mobile agent is a new kind of network computing paradigm in the field of distributed computing. Because of its distinguished advantages, such as asynchrony,autonomy,mobility,mobile agent is likely to become the dominant approach in network applications. However,with the popu1arity of mobile agent technology,more and more challenges come from those possible security threats in mobile agent systems. Starting from a detailed analysis of these security threats on mobile agent systems,we describe and compare the primary countermeasures for mobile agent security. Some representative mobile agent systems are introduced and their security mechanisms are evaluated.
Intelligent Detection System framework using Mobile agents

N.Jaisankar,R.Saravanan,K. Durai Swamy

DOI: https://doi.org/10.48550/arXiv.1004.0602

2010-04-05

Abstract:An intrusion detection system framework using mobile agents is a layered framework mechanism designed to support heterogeneous network environments to identify intruders at its best. Traditional computer misuse detection techniques can identify known attacks efficiently, but perform very poorly in other cases. Anomaly detection has the potential to detect unknown attacks; however, it is a very challenging task since its aim is to detect unknown attacks without any priori knowledge about specific intrusions. This technology is still at its early stage. The objective of this paper is that the system can detect anomalous user activity. Existing research in this area focuses either on user activity or on program operation but not on both simultaneously. In this paper, an attempt to look at both concurrently is presented. Based on an intrusion detection framework [1], a novel user anomaly detection system has been implemented and conducted several intrusion detection experiments in a simulated environment by analyzing user activity and program operation activities. The proposed framework is a layered framework, which is designed to satisfy the core purpose of IDS, and allows detecting the intrusion as quickly as possible with available data using mobile agents. This framework was mainly designed to provide security for the network using mobile agent mechanisms to add mobility features to monitor the user processes from different computational systems. The experimental results have shown that the system can detect anomalous user activity effectively.

Networking and Internet Architecture,Cryptography and Security
Intrusion detection techniques in mobile ad hoc and wireless sensor networks

Bo Sun,L. Osborne,Yang Xiao,S. Guizani,Lawrence Osborne,Sghaier Guizani

DOI: https://doi.org/10.1109/mwc.2007.4396943

IF: 12.777

2007-10-01

IEEE Wireless Communications

Abstract:Mobile ad hoc networks and wireless sensor networks have promised a wide variety of applications. However, they are often deployed in potentially adverse or even hostile environments. Therefore, they cannot be readily deployed without first addressing security challenges. Intrusion detection systems provide a necessary layer of in-depth protection for wired networks. However, relatively little research has been performed about intrusion detection in the areas of mobile ad hoc networks and wireless sensor networks. In this article, first we briefly introduce mobile ad hoc networks and wireless sensor networks and their security concerns. Then, we focus on their intrusion detection capabilities. Specifically, we present the challenge of constructing intrusion detection systems for mobile ad hoc networks and wireless sensor networks, survey the existing intrusion detection techniques, and indicate important future research directions.

computer science, information systems,telecommunications,engineering, electrical & electronic, hardware & architecture
Research on Security in Mobile Agent System

李新,吕建,曹春,冯新宇,陶先平

2002-01-01

Journal of Software

Abstract:Security is an important obstacle to the application of mobile agent technology. After analyzing the security problems and current status of research work, several methods are proposed to solve some of the problems, and are implemented in the mobile agent system Mogent. These methods can prevent or solve some of the security problems.

Mobile agent-based intrusion detection technology & system model research

A Model for Intrusion Detection System Based on Mobile Agent

On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

A SURVEY OF MOBILE AGENT SYSTEM

Multi-agent based hybrid Intrusion detection system

Research on Agent-based Intrusion Detection Technique

Intrusion Detection System Model Based on Multi Detection Technology

Research on Improved Intrusion Detection System in Mobile Ad hoc Network

The Mobile Agent Technology in Internet

The Study of Mobile Agent Technology

Mobile Agent Based Distributed Intrusion Detection System Model Protecting from Attack

Intrusion Detection Techniques for Mobile Wireless Networks

Intrusion Detection And Simulation For High-Speed Networks

On research and application of mobile agent technology

Research on Network Management Systems Via Multi-Agent Technology

Researches on Mobile Agent System Security

Bargain Security Model Based on Mobile Agent

A Study of Key Security Threats and Countermeasures in Mobile Agent Systems

Intelligent Detection System framework using Mobile agents

Intrusion detection techniques in mobile ad hoc and wireless sensor networks

Research on Security in Mobile Agent System