Title :
Integrating Partial Models of Network Normality via Cooperative Negotiation: An Approach to Development of Multiagent Intrusion Detection Systems
Author :
Amigoni, Francesco ; Basilico, Fabrizio ; Basilico, Nicola ; Zanero, Stefano
Author_Institution :
Dipt. di Elettron. e Inf., Politec. di Milano, Milano
Abstract :
Using agents for developing intrusion detection systems can provide several advantages, including configurability, adaptability, scalability, and robustness. Almost all works in agent-based intrusion detection have considered agents as elements that perform specific tasks in the intrusion detection process. In this paper, we propose a novel way of using agents to solve one of the most pressing problems in intrusion detection: the definition of an accurate model of network normality. We consider agents as associated to partial models of network normality that harmonize their conflicts via cooperative negotiation. Experimental results show that the proposed approach is promising.
Keywords :
multi-agent systems; security of data; cooperative negotiation; multiagent intrusion detection system; network normality; partial model; Autonomous agents; Availability; Event detection; Intelligent agent; Intelligent networks; Intrusion detection; Pressing; Prototypes; Robustness; Scalability; cooperative negotiation; intrusion detection systems;
Conference_Titel :
Web Intelligence and Intelligent Agent Technology, 2008. WI-IAT '08. IEEE/WIC/ACM International Conference on
Conference_Location :
Sydney, NSW
Print_ISBN :
978-0-7695-3496-1
DOI :
10.1109/WIIAT.2008.323