Title :
Distributed and Collaborative Intrusion Detection Systems
Author :
Farroukh, Amer ; Mukadam, Nabil ; Bassil, Elie ; Elhajj, Imad H.
Author_Institution :
Electr. & Comput. Eng. Dept., American Univ. of Beirut, Beirut
Abstract :
Intrusion detection systems help improve the security of networks by providing early warning and response. To improve the detection of attacks, sharing data among distributed nodes or terminals and collaborating on a decision is key. This paper presents a distributed and collaborative intrusion detection (DaCID) system that relies on Dempster Shafer theory of evidence for fusing data from multiple nodes. In this approach the detection is done collaboratively and the decision is distributed among all nodes. DaCID is more robust than other systems since it is completely distributed and the decision is made autonomously at each node. Simulation results demonstrated that DaCID´s performance approaches that of a centralized method.
Keywords :
case-based reasoning; computer networks; groupware; telecommunication computing; telecommunication security; Dempster Shafer evidence theory; collaborative intrusion detection systems; data fusion; data sharing; distributed intrusion detection systems; network security; Cats; Collaboration; Computer crime; Computer networks; Computer security; Data security; Distributed computing; Floods; Intrusion detection; Robustness; Collaborative; Dempster Shafer; Denial of Service; Distributed; Intrusion detection;
Conference_Titel :
Communications Workshop, 2008. LCW 2008. IEEE Lebanon
Conference_Location :
Beirut
Print_ISBN :
978-1-4244-1772-8
Electronic_ISBN :
978-1-4244-1754-4
DOI :
10.1109/LCW.2008.4545399
