Using Active Agent for Intrusion Detection and Management

Computers security has become a major issue in many organizations. There are different solutions to response to this need but they remain insufficient to truly secure network. Intrusion detection has an important place in the computer security. It can help us to verify if the implemented security solutions are ensuring their objectives as well as to verify if some one bypasses security measures. Intrusion detection systems currently used are number of limitations that influence negatively their performance and efficiency. So, we propose a distributed agent based architecture that has many advantages and that helps to reduce these limitations. In this paper we present firstly the motivation and background, and then we present the proposed architecture