Using agents for developing intrusion detection systems can provide several advantages, including configurability, adaptability, scalability, and robustness. Almost all works in agent-based intrusion detection have considered agents as elements that perform specific tasks in the intrusion detection process. In this paper, we propose a novel way of using agents to solve one of the most pressing problems in intrusion detection: the definition of an accurate model of network normality. We consider agents as associated to partial models of network normality that harmonize their conflicts via cooperative negotiation. Experimental results show that the proposed approach is promising.
Integrating partial models of network normality via cooperative negotiation: an approach to development of multiagent intrusion detection systems / F. Amigoni, F. Basilico, N. Basilico, S. Zanero - In: Web Intelligence and Intelligent Agent Technology, 2008. WI-IAT '08. IEEE/WIC/ACM International Conference on[s.l] : IEEE, 2008. - ISBN 9780769534961. - pp. 531-537 (( convegno International Conference on Intelligent Agent Technology tenutosi a Sydney nel 2008 [10.1109/WIIAT.2008.323].
Integrating partial models of network normality via cooperative negotiation: an approach to development of multiagent intrusion detection systems
N. BasilicoPenultimo
;
2008
Abstract
Using agents for developing intrusion detection systems can provide several advantages, including configurability, adaptability, scalability, and robustness. Almost all works in agent-based intrusion detection have considered agents as elements that perform specific tasks in the intrusion detection process. In this paper, we propose a novel way of using agents to solve one of the most pressing problems in intrusion detection: the definition of an accurate model of network normality. We consider agents as associated to partial models of network normality that harmonize their conflicts via cooperative negotiation. Experimental results show that the proposed approach is promising.File | Dimensione | Formato | |
---|---|---|---|
04740680.pdf
accesso riservato
Tipologia:
Publisher's version/PDF
Dimensione
387.85 kB
Formato
Adobe PDF
|
387.85 kB | Adobe PDF | Visualizza/Apri Richiedi una copia |
Pubblicazioni consigliate
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.