JSW 2009 Vol.4(6): 495-507 ISSN: 1796-217X
doi: 10.4304//jsw.4.6.495-507
doi: 10.4304//jsw.4.6.495-507
Agent IDS based on Misuse Approach
F. A. Barika1, N. El Kadhi2, K. Gh´edira1
1Higher Institute of Management, LI3, Tunisia
2LERIA, Epitech, Paris, ECCE Dept. Chairman Ahlia University Bahrein
Abstract—Most current IDS are generally centralized and suffer from significant limitations when used in high speed networks, especially when they face distributed attacks. This paper shows that the use of mobile agents has practical advantages for intrusion detection. For this purpose we carried out a comparative experimental study of some IDS, showing their limits and then we propose an implementation of a new MAFIDS (Mobile Agent for Intrusion Detection System) model focusing on misuse approach. The performance of MAFIDS is investigated in terms of detection delay, false alarm and detection rate by comparing it to a centralized IDS over real traffic and a set of simulated attacks.
Index Terms—Mobile Agents, Intrusions Detection System, Misuse Approach, Detection Delay, False Alarm, Detection Rate.
2LERIA, Epitech, Paris, ECCE Dept. Chairman Ahlia University Bahrein
Abstract—Most current IDS are generally centralized and suffer from significant limitations when used in high speed networks, especially when they face distributed attacks. This paper shows that the use of mobile agents has practical advantages for intrusion detection. For this purpose we carried out a comparative experimental study of some IDS, showing their limits and then we propose an implementation of a new MAFIDS (Mobile Agent for Intrusion Detection System) model focusing on misuse approach. The performance of MAFIDS is investigated in terms of detection delay, false alarm and detection rate by comparing it to a centralized IDS over real traffic and a set of simulated attacks.
Index Terms—Mobile Agents, Intrusions Detection System, Misuse Approach, Detection Delay, False Alarm, Detection Rate.
Cite: F. A. Barika, N. El Kadhi, K. Gh´edira, "Agent IDS based on Misuse Approach," Journal of Software vol. 4, no. 6, pp. 495-507, 2009.
PREVIOUS PAPER
First page
General Information
ISSN: 1796-217X (Online)
Frequency: Quarterly
Editor-in-Chief: Prof. Antanas Verikas
Executive Editor: Ms. Yoyo Y. Zhou
Abstracting/ Indexing: DBLP, EBSCO, CNKI, Google Scholar, ProQuest, INSPEC(IET), ULRICH's Periodicals Directory, WorldCat, etc
E-mail: jsweditorialoffice@gmail.com
-
Mar 01, 2024 News!
Vol 19, No 1 has been published with online version [Click]
-
Jan 04, 2024 News!
JSW will adopt Article-by-Article Work Flow
-
Apr 01, 2024 News!
Vol 14, No 4- Vol 14, No 12 has been indexed by IET-(Inspec) [Click]
-
Apr 01, 2024 News!
Papers published in JSW Vol 18, No 1- Vol 18, No 6 have been indexed by DBLP [Click]
-
Nov 02, 2023 News!
Vol 18, No 4 has been published with online version [Click]