Dynamic Multi-Layer Signature Based Intrusion Detection System Using Mobile Agents

Abstract

Intrusion detection systems have become a key component in ensuring the safety of systems and networks. As networks grow in size and speed continues to increase, it is crucial that efficient scalable techniques should be developed for IDS systems. Signature based detection is the most extensively used threat detection technique for Intrusion Detection Systems (IDS). One of the foremost challenges for signaturebased IDS systems is how to keep up with large volume of incoming traffic when each packet needs to be compared with every signature in the database. When an IDS cannot keep up with the traffic flood, all it can do is to drop packets, therefore, may miss potential attacks. This paper proposes a new model called Dynamic Multi-Layer Signature based IDS using Mobile Agents, which can detect imminent threats withvery high success rate by dynamically and automatically creating and using small and efficient multiple databases, and at the same time, provide mechanism to update these small signature databases at regular intervals using Mobile Agents.

Parallel Component Agent Architecture to Improve the Efficiency of Signature Based NIDS

“…Ref. [5] proposed a dynamic multilayer signature based IDS by using mobile agents, where each packet is compared with the database that can slow down the detection process. The other problem in this approach is the introduction of new services and need of a network administrator who manually updates or adds the signature.…”

“…Intrusion detection is defined as the process of identifying unauthorized use, misuse, and abuse of the computer system [4].To act appropriately against the attacks, currently security solutions are relying on the intrusion detection system. To detect the pattern and signatures of these malicious worms attacks normally IDS parameters divided into signature based or misuse detection and anomaly based systems [5]. Signature base intrusion detection system defines the set of rules that are used to recognize the given pattern by intruder.…”

A Role of Intrusion Detection System for Wireless Lan Using Various Schemes and Related Issues

“…Additional internal intruders are divided into invaders Science Publications AJAS who masquerade as another user. Those with genuine access to complex data and the most hazardous type, the intruders those have the influence to turn off audit control for them (Uddin and Rehman, 2010). Different types of threats include.…”

Enhanced Architecture for Misconfiguration and Intrusion Detection using Centralized Rule based System

“…When an IDS cannot keep up with the traffic flood, all it can do is to drop packets, therefore, may miss potential attacks. Author proposes a new model called Dynamic Multi-Layer Signature based IDS using Mobile Agents, which can detect imminent threats with very high success rate by dynamically and automatically creating and using small and efficient multiple databases, and at the same time, provide mechanism to update these small signature databases at regular intervals using Mobile Agents [4].…”