Abstract

AbstractIn distributed intrusion detection systems, self-monitoring is a difficult problem. One possibility is that each intrusion detection system is checked periodically by others. In our previous research for the self-monitoring, we proposed mutual tests between intrusion detection system and mobile agent using an immunity-based diagnosis. However, we have not clarified advantages and disadvantages of using mobile agent. In this paper, we compare the approach using mobile agent with that using host-to-host communication. Some simulation results show that in comparison with the host-to-host communication, mobile agents need twice as much time to detect corrupted intrusion detection systems, whereas a smaller number of mobile agents can identify correctly.KeywordsFalse Negative RateIntrusion DetectionMobile AgentIntrusion Detection SystemMutual TestThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Full Text
Paper version not known

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.