Grid-Aware Intrusion Detection System Using Gossip Algorithms

The goal of this paper is to develop a fault tolerant Grid Intrusion Detection System. The architecture is based on a network of high level detection systems which receive intrusion information form local detectors. These high level detectors constantly exchange information using gossip algorithms and correlate the data received received from the local level to detect complex attacks targeted at different parts of a Grid or at certain running applications. The detection system includes new and innovative methods to link intrusion information as well as coordination between different detection systems. The design of the system is also focused on reliability so in case any component crashes, the remaining ones will automatically cover the exposed resources and the system will survive without any loss of efficiency.