Distributed Agent Platform with Intrusion Detection Capabilities

Abstract

This paper’s goal is to design an intrusion detection system for a distributed environment adapted for developing and monitoring agents. The idea is to endow the agent platform with a high level of immunity by integrating the intrusion detection system based on artificial intelligence techniques. The agent platform itself is improved with advanced mechanisms for monitoring, analyzing, discovering, learning, and detecting intruders. The most important aspect of this platform is represented by its capability of detecting and rejecting possible intruders. The paper discusses in a critical way the traditional views of intrusion detection and analyzes the more complex approach to human immune system. The proposed architecture is a layered one and the paper describes the role and capability of each layer. The novelty of this approach is proved by the monitoring agents’ activities regarding services and actions which are translated in terms of system’s resources: processor, memory and bandwidth. The monitoring process is the key of the intrusion detection mechanism.