Cooperative Itinerant Agents (CIA): Security Scheme for Intrusion Detection Systems

Abstract

Intrusion Detection Systems (IDSs) detect suspicious activities and possible intrusions in a system or a particular network at the moment at which these happen. To achieve their objectives the different entities that compose the IDS need to communicate with each other. Thus, it is important to keep in mind the integrity of the information, authentication and access control. Agents provide flexibility and distributed processing of the network traffic but increase the risk of possible intrusions. In this paper we present a new security scheme to verify the entities' integrity of an Intrusion Detection System based on autonomous agents throughout mobile cooperative agents using watermarking software techniques. Furthermore, software fingerprinting is used to assign a different mark to each IDS's entity in order to detect a possible collusion attack.

A performance model to Cooperative Itinerant Agents (CIA): a security scheme to IDS

“…Each transceiver is in charge of keeping a copy of the marks embedded in the agents in order to be able to compare them and know whether any mark has changed. Security scheme CIA [1] consists of providing vigilance over each monitor and transceiver of the IDS using Cooperative Itinerant Agents (CIAs). Each monitor in the IDS generates a CIA and is in charge of control it.…”

“…We have proposed a security scheme named Cooperative Itinerant Agent (CIA) [1] in order to monitor all the IDS entities and improve the security of the system. We have included watermarking and fingerprinting techniques to identify each entity inside the system.…”

Enhanced Intrusion Detection System for Mobile Adhoc Networks using Mobile Agents with no Manager

“…Here every layer activates the agents to the layer of agents that above to them. In [5] watermarking and finger printing is used to check infringement in the activities of the attacker. A distributed cooperative intrusion detection with the help of mobile agents is described in [6] by Dalila Boughaci et al [7] describes the intrusion detection by using the tables for malicious activities and accordingly it acknowledges among the nodes into the network.…”