Trustworthy distributed collaborative intrusion detection using mobile agents

Abstract

A distributed environment is one in which intrusions are prevalent and drastically affect the performance of the networks. Therefore a need for Intrusion Detection Networks arises. Collaborators could be used here to enhance the detection of attacks. But still this concept suffers from lack of trustworthiness in the distributed environment. We introduce Mobile Agents (MA) to handle this problem effectively. A DCE - TRUST architecture is proposed where MAs are used to migrate from one node to another autonomously within the range of collaborators in and out of each network to inform them about the detected intrusions accurately and in a timely manner. We also found that the proposed architecture enhances detection rate and minimizes the rate in which each node gets to know about the attacks.