Mutual tests using immunity-based diagnostic mobile agents in distributed intrusion detection systems
Mutual tests using immunity-based diagnostic mobile agents in distributed intrusion detection systems
复制标题
DOI：
10.1007/s10015-004-0305-9
复制
发表时间：
2004-12
影响因子：
0.9
通讯作者：
Yuji Watanabe;Y. Ishida
中科院分区：
文献类型：
--
作者：
Yuji Watanabe;Y. Ishida
分布式入侵检测系统与集中式系统相比具有可扩展性、自适应性和容错性等优点。当前分布式系统中的一个研究课题是自我监控，以确定损坏的入侵检测系统。自我监控的一种方式是入侵检测系统相互检查。正如我们在此描述的，这可以通过移动的代理使用基于独特型网络理论建模的基于免疫的诊断方法来完成。在模拟中，正常的入侵检测系统的可信度保持在1附近，而对于损坏的入侵检测系统，可信度下降到约0，从而能够识别后者。我们还确认了一些参数对诊断能力的影响。
Distributed intrusion detection systems have several advantages over centralized systems, such as scalability, adaptability, and fault tolerance. A current research topic in distributed systems is self-monitoring to identify corrupted intrusion detection systems. One way of self-monitoring is for intrusion detection systems to check each other. As we describe herein, this can be done by mobile agents using an immunity-based diagnostic method modeled on idiotypic network theory. In simulations, the credibility of normal intrusion detection systems remained near 1, while it fell to about 0 for corrupted intrusion detection systems, thus enabling identification of the latter. We also confirmed what effects some parameters have on the diagnostic capability.