Research on intrusion detection rules based on XML in distributed IDS

Author

Liu, Wen-tao

Author_Institution

Dept. of Comput. & Inf. Eng., Wuhan Polytech. Univ., Wuhan

Volume

3

fYear

2008

fDate

12-15 July 2008

Firstpage

1400

Lastpage

1403

Abstract

This paper describes the design and research of intrusion detection rules in the distributed intrusion detection system which is based on agent. The hierarchical framework model based on intelligent agents is proved in the distribute intrusion system. The model involves three kinds of intelligent agents: A type agent, B type agent and C type agent which have different task. The definition and analysis of intrusion rules in the agent is discussed. This article also studies how to use the XML to design the system data and intrusion detection rules. The definition and transportation of four kings of data called XML protocol data, XML control information, XML intrusion detection rules and XML intrusion response in the agent is presented. The IAP and SSL are used to solve the safety of XML data transported between two agents in the system.

Keywords

XML; security of data; software agents; XML control information; XML intrusion detection rule; XML intrusion response; XML protocol data; distributed intrusion detection system; intelligent agent; Cybernetics; Data security; Design engineering; Distributed computing; Intelligent agent; Intrusion detection; Machine learning; SGML; Transportation; XML; Distributed intrusion detection system; Intelligent agent; Intrusion rule; XML;

fLanguage

English

Publisher

ieee

Conference_Titel

Machine Learning and Cybernetics, 2008 International Conference on

Conference_Location

Kunming

Print_ISBN

978-1-4244-2095-7

Electronic_ISBN

978-1-4244-2096-4

Type

conf

DOI

10.1109/ICMLC.2008.4620624

Filename

4620624