An agent-based intrusion detection system for local area networks

International Journal of Communication Networks and Information Security

Volumn 2, Issue 2, 2010, Pages 128-140

  Sen, Jaydip ^a  

^a TATA CONSULTANCY SERVICES   (India)

Author keywords

Agents; Bayesian network; Byzantine agreement protocol; Distributed intrusion detection; Distributed trust management; Fault tolerance; MSBN; Multi agent systems

Indexed keywords

EID: 80053481651     PISSN: 20760930     EISSN: 2073607X     Source Type: Journal    
DOI: None     Document Type: Article

References (53)

1. R. Gopalakrishna and E. Spafford, "A Framework for Distributed Intrusion Detection using Interest Driven Cooperating Agents", in Proceedings of Recent Advances in Intrusion Detection, 4th International Symposium (RAID 2001), October 2001.
2. J. Sen and I. Sengupta, "Autonomous Agent-Based Distributed Fault-Tolerant Intrusion Detection System", in Proceedings of the 2nd International Conference on Distributed Computing and Internet Technology (ICDCIT'05), December 22-24, 2005, Bhubaneswar, India, LNCS No: 3186, pp. 125-131.
3. F. V. Jensen, An Introduction to Bayesian Networks, Springer Verlag, New York, 1996.
4. Y. Xiang, D. Poole, and M. Beddoes, "Multiply Sectioned Bayesian Networks and Junction Forest for Large Knowledge-Based Systems", Computational Intelligence, 9(2): 171-220, 1993.
5. S.L. Lauritzen and D.J. Spiegelhalter, "Local Computations with Probabilities on Graphical Structures and their Applications to Expert Systems", in Proceedings of the Royal Statistical Society, Series B, 50, 1988, pp. 154-227.
6. S.R. Snapp, J. Brentano, and G.V. Dias, "DIDSDistributed Intrusion Detection System-Motivation, Architecture and an Early Prototype", in Proceedings of the 14th National Computer Security Conference, October 1991.
7. P.A. Porras and P.G. Neumann, "EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances", in 1997 National Information Systems Security Conference, October 1997.
8. J. S. Balasubramaniyan, J. O. Garcia-Fernandez, D. Isacoff, E. Spafford, and D. Zamboni, "An Architecture for Intrusion Detection using Autonomous Agents", in Proceedings of the 14th Annual Computer Security Applications Conference, IEEE Computer Society, December 1998, pp. 13-24.
9. E. Spafford and D. Zamboni, "Intrusion Detection using Autonomous agents", Computer Networks, 34 (4): 547-570, October 2000.
10. J. Dickerson, J. Juslin, O. Koukousoula, and J. Dickerson, "Fuzzy Intrusion Detection", in IFSA World Congress and 20th North American Fuzzy Information Processing Society (NAFIPS) International Conference, Vancouver, British Columbia, Vol. 3, July 2001, pp. 1506-1510.
11. X. Qin, W. Lee, L. Lewis, and J. B. D. Cabrera, "Integrating Intrusion Detection and Network Management", in Proceedings of the 8th IEEE/IFIP Network Operations and Management Symposium (NMOS), Florence, Italy, April 2002, pp. 329-344.
12. D. Frincke, D. Tobin, J. McConnell, J. Marconi, and D. Polla, "A Framework for Cooperative Intrusion Detection", in Proceedings of the 21st National Information Systems Security Conference, Arlington, VA, October 1998, pp. 361-373.
13. P. Ning, X. S. Wang, and S. Jajodia, "Modeling Requests among Cooperating Intrusion Detection Systems", Computer Communications, 23(17): 1702-1715, 2000.
14. P. Ning, X.S. Wang, and S. Jajodia, "A Query Facility for Common Intrusion Detection Framework", in Proceedings of the 23rd National Information Systems Security Conference, Baltimore, MD, October 2000, pp. 317-328.
15. R. Feiertag, C. Kahn, P. Porras, D. Schnackenberg, S. Staniford-Chen, and B. Tung, "A Common Intrusion Specification Language (CISL)", URL: http://www.giods.org/drafts/language.txt. June 2000.
16. P. Mell and M. McLarnon, "Mobile Agent Attack Resistant Distributed Hierarchical Intrusion Detection System", in Proceedings of Recent Advances in Intrusion Detection (RAID)' 99, CERIUS, Purdue University, 1999.
17. G. Helmer, J.S.K. Wong, V. Honavar, and L. Miller, "Intelligent Agents for Intrusion Detection", in Proceedings of IEEE Information Technology Conference, Syracuse, NY, September 1998, pp. 121-124.
18. J. Yang, P. Ning, X.S. Wang, and S. Jajodia, "CARDS: A Distributed System for Detecting Coordinated attacks", in Proceedings of IFIP TCII 16th Annual Working Conference on Information Security, August 2000, pp. 171-180.
19. J.L. Thames, R. Abler, and A. Saad, "Hybrid Intelligent Systems for Network Security", in Proceedings of the 44th ACM Annual Southeast Regional Conference, March 10-12, 2006, Melbourne, Florida, pp. 286-289.
20. F. Jemili, M. Zaghdoud, and M.B. Ahmed, "A Framework for an Adaptive Intrusion Detection System using Bayesian Network", in Proceedings of IEEE International Conference on Intelligence and Security Informatics, May 23-24, 2007, pp. 66-70.
21. M. Silva, D. Lopes, and Z. Abdelouahab, "A Remote IDS Based on Multi-Agent Systems, Web Services and MDA", in Proceedings of the International Conference on Software Engineering Advances (ICSEA), 2009, pp. 64.
22. D. Ye, "An Agent-Based Framework for Distributed Intrusion Detections", Master Thesis, School of Computer Science and Software Engineering, University of Wollongong, Australia, 2009.
23. X. Zhao, H. Jiang, and L. Jiao, "A Data-Fusion-Based Method for Intrusion Detection System in Networks", International Journal of Information Engineering and Electronic Business, Vol 1, pp, 33-41, October 2009.
24. J. Zeng and D. Guo, "Agent-Based Intrusion Detection for Network-Based Application", International Journal of Network Security, Vol. 8, No. 3, pp. 201-210, May 2009.
25. Y. Liu, C.F. Xu, W.D. Chen, and Y.H. Pan, "KQML Realization Algorithms for Agent Communication", in Proceedings of the 5th World Congress on Intelligent Control and Automation, 2004, pp. 2376-2379.
26. D. Curry, H. Debar, and M. Huang, "IDMEF Data Model and XML DTD". URL: http://www.oasisopen.org/cover/IDMEF-provisional-draft-ietf-idwg-idmefxml-02.html, 2000.
27. A.L. Da Silva, Z. Abdelouahab, and D. Lopes, "Intelligent IDS for Mobile Devices: Modeling and Prototyping", International Journal of Communication Networks and Information Security (IJCNIS), Vol 1, No 3, December 2009, pp. 12-23.
28. M.M. Rasheed, O. Ghazali, N.M. Norwawi, and M.M. Kadhum, "A Traffic Signature-Based Algorithm for Detecting Scanning Internet Worms", International Journal of Communication Networks and Information Security (IJCNIS), Vol 1, No 3, December 2009, pp. 24-30.
29. O. Toutonji and S-M. Yoo, "An Approach against a Computer Worm Attack", International Journal of Communication Networks and Information Security (IJCNIS), Vol 1, No 2, August 2009, pp. 47-53.
30. S. Russell and P. Norvig, Artificial Intelligence: A Modern Approach. Prentice Hall Series in Artificial Intelligence, 2001.
31. Richard E. Neapolitan, Probabilistic Reasoning in Expert Systems, John Wiley, 1990.
32. Y. Xiang. "A Probabilistic Framework for Cooperative Multiagent Distributed Interpretation and Optimization of Communication", Artificial Intelligence, 87 (1-2); 295-342, 1996.
33. Y. Xiang. "Comparison of Multiagent Inference Methods in Multiply Sectioned Bayesian Networks", International Journal of Approximate Reasoning, 33(3): 235-254, August 2003.
34. Judea Pearl. Probabilistic Reasoning in Intelligent Systems: Networks of Plausible Inference, Morgan-Kaufmann, 1988.
35. V.R. Lesser and D.D. Corkill, "Functionally Accurate Cooperative Distributed Systems", IEEE Trans. On Systems, Man and Cybernetics, SMC-11(1): 81-96, 1981.
36. A. Ghosh and S. Sen, "Agent-based Distributed Intrusion Alert System", in 6th International Workshop on Distributed Computing, Kolkata, India, December 2004.
37. M.Y. Huang and T.M. Wicks, "A Large-Scale Distributed Intrusion Detection Framework Based on Attack Strategy Analysis", in Web Proceedings of the 1st International Workshop on Recent Advances in Intrusion Detection, Louvain-la-Neuve, Belgium, September 1998.
38. S.L. Scott, "A Bayesian Paradigm for Designing Intrusion Detection System", Computational Statistics and Data Analysis, 45(1): 69-83, February 2004.
39. F. Bellifemine, A. Poggi and G. Rimassa, "JADE-A FIPA Compliant Agent Framework", in Proceedings of the 4th International Conference and Exhibition on the Practical Application of Intelligent Agents and Multiagents, London, 1999.
40. FIPA-OS Developers Guide. URL: http://fipaos.sourceforge.net/docs/Developers_Guide.pdf.
41. R. Dechter, "Bucket Elimination: A Unifying Framework for Probabilistic Inference", in Proceedings of the 12th Conference on Uncertainty in Artificial Intelligence (UAI-96), Portland, Oregon, 1996, pp. 211-219.
42. F. V. Jensen, S.L Lauritzen, and K. G. Oleson, "Bayesian Updating in Causal Probabilistic Networks by Local Computations." Computational Statistics Quarterly, 4:269-282, 1990.
43. H. Guo and W.H. Hsu, "A Survey of Algorithms for Real-time Bayesian Network Inference." In AAAI/KDD/UAI-2002 Joint Workshop on Real-Time Decision Support and Diagnosis Systems, Edmonton, July 2002.
44. Y. Xiang, "Belief Updating in Multiply Sectioned Bayesian Networks without Repeated Local Propagation", International Journal of Approximate Reasoning 23:1-21, 2000.
45. G.F. Cooper, "The Computational Complexity of Probabilistic Inference using Bayesian Belief Networks", Artificial Intelligence, 42: 393-405, 1990.
46. S. Shimony, "Finding Maps for Belief Networks is NPHard", Artificial Intelligence, 68: 399-410, 1994.
47. L. Lamport, R. Shostak, and M. Pease, "The Byzantine Generals Problem", ACM Transactions on Programming Languages and System, 4(3): 382-401, July 1982.
48. D.M. Toth, The Byzantine Agreement Protocol Applied to Security, Masters Dissertation in Computer Science, Worcester Polytechnic Institute, December 2004.
49. Kddcup 99 Intrusion Detection Data Set. URL: http://kdd.ics.uci.edu/databases/kddcup99/kddcup.data_10_percent.gz. DARPA Intrusion Data Repository.
50. MIT Lincoln Laboratory. URL: http://www.ll.mit.edu/IST/ideval/. DARPA Intrusion Data Repository.
51. J. Cheng, D. Bell, and W. Liu, Learning Bayesian Networks from Data: An efficient Approach based on Information Theory, Technical Report, University of Alberta, Canada, 1998.
52. Ethereal Software. URL: http://www.ethereal.com.
53. Y. Li, R. Wang, and J. Xu, "A Novel Distributed Intrusion Detection Model Based on Immune Mobile Agent", in Proceedings of the International Symposium on Web Information Systems and Applications (WISA), pp. 72-75, Nanchang, China, May 2009.