Mobile Agents in Intrusion Detection System: Review and Analysis


  •  Kamaruzaman Maskat    
  •  Mohd Afizi Mohd Shukran    
  •  Mohammad Adib Khairuddin    
  •  Mohd Rizal Mohd Isa    

Abstract

Intrusion Detection System (IDS) is used to detect intrusion and then alert the system administrator about the intrusion. This is what traditional IDS is all about. It is then up to the system administrator to deal with the intrusion. Human intervention is still needed when it comes to dealing with intrusion. This is because traditional IDS could only detect the intrusion but could not, on its own respond towards the intrusion. IDS is only able to alert the system administrator when it detects an intrusion. How and when the intrusion is dealt with is up to the system administrator. Human intervention when dealing with intrusion is not a problem if the person assigned to that task is always reliable. Therefore, this paper analyzes the evolution of IDS and how mobile agents such as SNORT could increase the integrity of traditional systems without human intervention.


This work is licensed under a Creative Commons Attribution 4.0 License.