Use of Publisher-Subscriber Design Pattern in Infrastructure of Distributed IDS Systems

In this paper we have approached one problem in development of distributed intrusion detection systems (IDS), namely realization of communications among its nodes. During the last few years, a significant trend towards building of highly distributed IDS systems could be noticed. In this situation a reliable communications solution that would enable updating of signature bases and alert notification is required. We propose use of subscriber-publisher design pattern for this purpose. Data schemes that could be used in this case are described.