Abstract:More and more application services are provided and distributed over the Internet for public access. However, the security of distributed application severs is becoming a serious problem due to many possible attacks, such as deny of service, illegal intrusion, etc. Because of weakness of the firewall systems in ensuring security, intrusion detection system (IDS) becomes popular. Now, many kinds of IDS systems are available for serving in the Internet distributed system, but these systems mainly concentrate on networkbased and host-based detection. It is inconvenience to integrate these systems to distributed application servers for application-based intrusion detection. An agent-based IDS that can be smoothly integrated into applications of enterprise information systems is proposed in this paper. We will introduce its system architecture, agent structure, integration mechanism, and etc. In such an IDS system, there are three kinds of agents, i.e. client agent, server agent and communication agent. This paper is also to explain how to integrate agents with access control model for getting better security performance. By introducing standard protocol such as KQML, IDMEF into the design of agent, our agent-based IDS shows much more flexible for built in different kinds of software application system.

On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

Research of Distributed Pre-Decision Engine in Wireless Intrusion Prevention Systems

Multi-agent based hybrid Intrusion detection system

Research of the Peer-to-Peer Network Based on Super-peer

Study on adaptive trust alert correlation P2P overlay IDS

Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Network Safeguard System Based on IDXP

Distributed Software Engineering Management

Intrusion Detection And Simulation For High-Speed Networks

A Distributed Intrusion Detecting System Based on Tridimensional Agent

An Efficient Hybrid IDS Deployment Architecture for Multi-Hop Clustered Wireless Sensor Networks

Research on Data Mining-based Intrusion Detection in Real-time Environment

Intrusion Detection System Model Based on Multi Detection Technology

Dynamic Hierarchical Distributed Intrusion Detection System Based on Multi-agent System

A Novel Peer-to-Peer Intrusion Detection System

A Distributed Intrusion Detection System Using Cooperating Agents

A Novel Peer-To-Peer Intrusion Detection System Using Mobile Agents in Manets

Mobile Agent Based Distributed Intrusion Detection System Model Protecting from Attack

Distributed Detection of Network Intrusions Based on a Parametric Model.

Agent-Based Intrusion Detection System for Integration.

Research on Distributed Intrusion Prevention System on High-Speed Networks