Abstract
In distributed intrusion detection systems, self-monitoring is a difficult problem. One possibility is that each intrusion detection system is checked periodically by others. In our previous research for the self-monitoring, we proposed mutual tests between intrusion detection system and mobile agent using an immunity-based diagnosis. However, we have not clarified advantages and disadvantages of using mobile agent. In this paper, we compare the approach using mobile agent with that using host-to-host communication. Some simulation results show that in comparison with the host-to-host communication, mobile agents need twice as much time to detect corrupted intrusion detection systems, whereas a smaller number of mobile agents can identify correctly.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Mukherjee, B., Heberlein, L.T., Levitt, K.N.: Network intrusion detection. IEEE Network 8(3), 26–41 (1994)
Hofmeyr, S., Forrest, S.: Architecture for an artificial immune system. Evolutionary Computation Journal 7(1), 45–68 (2000)
Spafford, E., Zamboni, D.: Intrusion detection using autonomous agents. Computer Networks 34, 547–570 (2000)
Dasgupta, D.: Immunity-based intrusion detection systems: a general framework. In: Proc. of the 22nd National Information Systems Security Conference, pp. 18–21 (1999)
Jansen, W.A.: Intrusion detection with mobile agents. Computer Communications 25(15), 1392–1401 (2002)
Watanabe, Y., Ishida, Y.: Mutual tests among agents in distributed intrusion detection systems using immunity-based diagnosis. In: Proc. of AROB 8th 2003, vol. 2, pp. 682–685 (2003)
Ishida, Y.: Fully distributed diagnosis by PDP learning algorithm: towards immune network PDP model. In: Proc. of IJCNN, pp. 777–782 (1990)
Jerne, N.K.: The immune system. Scientific American 229(1 ), 52–60 (1973)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2003 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Watanabe, Y., Ishida, Y. (2003). Immunity-Based Approaches for Self-Monitoring in Distributed Intrusion Detection System. In: Palade, V., Howlett, R.J., Jain, L. (eds) Knowledge-Based Intelligent Information and Engineering Systems. KES 2003. Lecture Notes in Computer Science(), vol 2774. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-45226-3_69
Download citation
DOI: https://doi.org/10.1007/978-3-540-45226-3_69
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-40804-8
Online ISBN: 978-3-540-45226-3
eBook Packages: Springer Book Archive