¹Higher Institute of Management, LI3, Tunisia
²LERIA, Epitech, Paris, ECCE Dept. Chairman Ahlia University Bahrein

---

Abstract—Most current IDS are generally centralized and suffer from significant limitations when used in high speed networks, especially when they face distributed attacks. This paper shows that the use of mobile agents has practical advantages for intrusion detection. For this purpose we carried out a comparative experimental study of some IDS, showing their limits and then we propose an implementation of a new MAFIDS (Mobile Agent for Intrusion Detection System) model focusing on misuse approach. The performance of MAFIDS is investigated in terms of detection delay, false alarm and detection rate by comparing it to a centralized IDS over real traffic and a set of simulated attacks.

Index Terms—Mobile Agents, Intrusions Detection System, Misuse Approach, Detection Delay, False Alarm, Detection Rate.

[PDF]

Cite: F. A. Barika, N. El Kadhi, K. Gh´edira, "Agent IDS based on Misuse Approach," Journal of Software vol. 4, no. 6, pp. 495-507, 2009.