An architectural framework for distributed intrusion detection using smart agents

Proceedings of the International Conference on Security and Management, SAM'04

Volumn , Issue , 2004, Pages 193-199

  Chatzigiannakis, V ^a   Androulidakis, G ^a   Grammatikou, M ^a   Maglaris, B ^a  

^a NATIONAL TECHNICAL UNIVERSITY OF ATHENS   (Greece)

Author keywords

Central Management; Distributed Intrusion Detection; IDMEF data model; Rate Limiting; Smart Agents

Indexed keywords

COMPUTER HARDWARE; DEMODULATION; INTERCOM SYSTEMS; LOCAL AREA NETWORKS; NETWORK PROTOCOLS; PROBLEM SOLVING; SENSORS;

ANTI-VIRUS PROGRAMS; DISTRIBUTED INTRUSION DETECTION; NETWORK SYSTEMS; SMART AGENTS;

INTELLIGENT AGENTS;

EID: 12244266088     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. Biswanath Mukherjee, Todd L. Heberlein, and Karl N. Levitt, "Network Intrusion Detection", IEEE Network, May/June 1994
2. Cisco Netflow, http://www.cisco.com/warp/public/732/Tech/nmp/netflow/ index.shtml
3. D.Curry and H. Debar, "Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition", Internet Draft, November 2002.
4. Snort project - http://www.snort.org
5. Libpcap library - http://www.tcpdump.org
6. Libidmef library - http://www.silicondefense.com/idwg/libidmef/
7. Libxml2 library - http://www.xmlsoft.org
8. R.Rivest, "The MD5 Message-Digest Algorithm", RFC 1321, Apr 1992
9. R.L.Rivest, A.Shamir and L.M.Adleman, "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems", Communications of the ACM, Feb 1978
10. Openssl project - http://www.openssl.org
11. Hewlett-Packard Openview - http://www.openview.hp.com
12. G.Koutepas, F.Stamatelopoulos, V.Hatzigiannakis and B.Maglaris, "Design and Operational Characteristics of a Distributed Cooperative Infrastructure against DDoS Attacks", Procceedings of the 2nd European Conference on Information Warfare and Security, UK, June 2003.
13. Stuart Staniford-Chen, R. Crawford, M. Dilger, J. Frank, J. Hoagland, K. Levitt, D. Zerkle. GrIDS: A Graph-Based Intrusion Detection System for Large Networks. Proceedings of the 19th National Information Systems Security Conference, 1996.
14. Phillip A. Porras and Peter G. Neumann. EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances. In 1997 National Information Systems Security Conference, October 1997.
15. Jai Sundar Balasubramaniyan, Jose Omar Farcia-Fernandez, David Isacoff, Eugene Spafford, and Diego Zamboni. An Architecture for Intrusion Detection using Autonomous Agents. Technical report 98/05, Purdue University, 1998.
16. Q. Zhang and R. Janakiraman, "Indra: A Distributed Approach to Network Intrusion Detection and Prevention", Washington University Technical Report #WUCS-01-30, 2001.
17. Yarochkin Fyodor, "SNORTNET - A Distributed Intrusion Detection System", Kyrgyz Russian Slavin University, Bishkek, Kyrgyzstan, June 2000.
18. D. Gupta, T. Buchheim, B. Feinstein, G. Matthews, R. Pollock, "IAP: Intrusion Alert Protocol", Internet Draft, March 2001.