Applying Computational Grids for Enhancing Intrusion Detection Systems

This paper proposes the use of grid computing platforms as an enabling technology for the implementation of a pervasive infrastructure which aims at improving the efficiency and effectiveness in the containment of network attacks. First, we identify a set requirements and design principles for the construction of new intrusion detection systems. Then, we present a set of grid capabilities and features which are fundamental for the implementation of new intrusion detection and response systems. As a contribution, we show how a grid-based collaborative environment can be employed in the production, delivery, and use of knowledge and mechanisms for intrusion detection and containment. Such environment provides a laboratory for the development of security resources (signatures, software patches, informative texts, logs, and others), augmented by a digital library capable of supporting the efficient storage, manipulation, and deployment of such resources. As the main result of this work, the efficiency and effectiveness of mechanisms and strategies can be enhanced.