CIDS: An agent-based intrusion detection system

Computers and Security

Volumn 24, Issue 5, 2005, Pages 387-398

  Dasgupta, D ^a   Gonzalez, F ^a   Yallapu, K ^a   Gomez, J ^a   Yarramsettii, R ^a  

^a University of Memphis   (United States)

Author keywords

Cougaar; Decision support; Intrusion detection; Plugin; Security agents

Indexed keywords

COMPUTER ARCHITECTURE; COMPUTER CRIME; COMPUTER NETWORKS;

COMMON INTRUSION DETECTION LANGUAGE; COUGAAR; PLUGIN; SECURITY AGENTS;

SECURITY OF DATA;

EID: 24344493979     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2005.01.004     Document Type: Article

References (37)

1. Allen J, et al. State of the practice of intrusion detection technologies. Technical report (no. CMU/SEI-99-TR-028); January 2000.
2. Anderson JP. Computer security threat monitoring and surveillance. Technical report. James P Anderson Co., Fort Washington, PA; April 15, 1980.
3. Asaka M, Taguchi A, Goto S. The implementation of IDA: an intrusion detection agent system. In: Proceedings of the 11th FIRST Conference; June 1999a.
4. Asaka M, Okazawa S, Taguchi A, Goto S. A method of tracing intruders by use of mobile agents. INET'99; June 1999b.
5. Axelsson S, Lindqvist U, Gustafson U, Jonsson E. An approach to UNIX security logging. Technical report, IEEE Network; 1996.
6. Balasubramaniyan J, Fernandez JO, Isacoff D, Spafford E, Zamboni D. An architecture for intrusion detection using autonomous agents, COAST. Technical report 98/5. Purdue University; June 1998.
7. Barrus J, Rowe NC. A distributed autonomous-agent network-intrusion detection and response system. Proceedings of the command and control research and technology symposium, Monterey, CA; June 1998.
8. Bass T. Multisensor data fusion for next generation distributed intrusion detection systems. Invited paper, 1999 IRIS national symposium on sensor and data fusion. The Johns Hopkins University Applied Physics Laboratory; 24-27 May 1999.
9. M.C. Bernardes, and Moreira E. dos Santos Implementation of an intrusion detection system based on mobile agents International symposium on software engineering for parallel and distributed systems 2000 158 164
10. Brian H, Dasgupta D. Mobile security agents for network traffic analysis. In: Proceedings of the second DARPA Information Survivability Conference and Exposition II (DISCEX-II), Anaheim, California; June 13-14, 2001.
11. Carver CA, Hill JMD, Surdu JR, Pooch UW. A methodology for using intelligent agents to provide automated intrusion response. IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshop, West Point, NY; June 2000.
12. S.N. Chari, and P.-C. Cheng BlueBox: a policy-driven host-based intrusion detection system ACM Transactions on Information and System Security 6 2 May 2003 173 200
13. Cougaar: a cognitive agent architecture. Open source software available from the website (www.cougaar.org ).
14. Crosbie M, Spafford E. Defending a computer system using autonomous agents. Proceedings of the 18th national information systems security conference; October 1995.
15. Dasgupta D. Immunity-based intrusion detection systems: a general framework. Proceedings of the 22nd national information systems security conference (NISSC). October 18-21, 1999.
16. D. Dasgupta, and F. Gonzalez An immunity-based technique to characterize intrusions in computer networks IEEE Transactions on Evolutionary Computation 6 3 June 2002
17. Debar H, Dacier M, Wepspi A. A revised taxonomy for intrusion detection systems. Technical report, Computer Science/Mathematics; 1999.
18. D.E. Denning An intrusion-detection model IEEE Transactions on Software Engineering SE-13 2 February 1987 222 232
19. Dunlap GT, Dasgupta D. An administrative tool for distributed security task scheduling. Proceedings of the third annual international systems security engineering association conference, Orlando; March 13-15, 2002.
20. Gomez J, Dasgupta D. Evolving fuzzy classifiers for intrusion detection. In: Proceeding of third annual information assurance workshop; June 17-19, 2002.
21. G.G. Helmer, J.S.K. Wong, V. Honavar, and L. Miller Intelligent agents for intrusion detection Proceedings of IEEE information technology conference, Syracuse, NY September 1998 121 124
22. Helmer GG, Wong JSK, Honavar V, Miller L. Lightweight agents for intrusion detection. Journal of Systems and Software; November 27, 2002.
23. Intrusion Detection Message Exchange Format. Extensible Markup Language (XML) Document Type Definition. Intrusion Detection Working Group. IETF Internet Draft 'draft-ietf-idwg-idmef-xml-01.txt'. By David A. Curry (Internet Security Systems, Inc.). 2000-07.
24. Jansen W, Mell P, Karygiannis T, Marks D. Applying mobile agents to intrusion detection and response. National Institute of Standards and Technology Computer Security Division, NIST Interim Report (IR) - 6416; October 1999.
25. Jansen, W, Mell P, Karygiannis T, Marks D. Mobile agents in intrusion detection and response. Proceedings of the 12th annual Canadian information technology security symposium, Ottawa, Canada; June 2000.
26. Jazayeri M, Lugmayr W. Gypsy: a component-based mobile agent system. In: Eighth euromicro workshop on parallel and distributed processing, Greece; January 2000.
27. Krügel C, Toth T. Applying mobile agent technology to intrusion detection. Distributed systems group, Technical University Vienna, Argentinierstrasse 8, A-1040 Vienna, Austria; April 30, 2002.
28. Krügel C, Toth T. Sparta - a security policy reinforcement tool for large networks, submitted to I-NetSec 01, 2001.
29. T. Lane, and C.E. Brodley Temporal sequence learning and data reduction for anomaly detection ACM Transaction on Information and System Security 2 3 August 1999
30. Lee W, Stolfo SJ. Data mining approaches for intrusion detection. In: Proceedings of the seventh USENIX security symposium. USENIX; 1998.
31. W. Lee, and S. Stolfo A framework for constructing features and models for intrusion detection systems ACM Transactions on Information and System Security 3 4 November 2000
32. W. Lee, S. Stolfo, and K. Mok Adaptive intrusion detection: a data mining approach Artificial Intelligence Review 14 6 December 2000 533 567 Kluwer Academic Publishers
33. Porras PA, Neumann PG. Emerald: event monitoring enabling responses to anomalous live disturbances. In: Proceedings of the twentieth national information systems security conference; October 1997.
34. Porras P, Schnackenberg D, Staniford-Chen S, Stillman M, Felix Wu. The common intrusion detection framework architecture (CIDF). Position paper at the Information survivability workshop, Orlando FL; October 1998.
35. Queiroz JD de, Costa Carmo LFR da, Pirmez L. An autonomous mobile agent system to protect new generation networked applications. In: Second annual workshop on recent advances in intrusion detection, Rio de Janeiro, Brazil; September 1999.
36. Roesch M. Snort: lightweight intrusion detection for networks. Proceedings of LISA '99: 13th systems administration conference, Seattle, Washington, USA; November 7-12, 1999.
37. Warrender C, Forrest S, Pearlmutter B. Detecting intrusions using system calls: alternative data models. In: Proceedings of the IEEE symposium on security and privacy; May 1999.