Correlation of Intrusion Detection Information in Grid Environments

This paper presents a novel intrusion detection system for Grid Systems. It is intended to identify potential attackers who try to modify or compromise the applications sent to execution by various users or target different resource groups within the Grid. The system makes use of a number of available local intrusion detection systems which send data to a grid-level intrusion detection system that takes decisions based on an overview of the entire Grid. This IDS can correlate the information received from the local systems, as well as monitoring data from the Grid System, using statistical methods, to identify attacks that cannot be detected at a local level. Another contribution of this paper is the classification of threats based on the intent of the attacker. This paper also demonstrates that these types of attacks can be detected using the proposed complex intrusion detection system.