A Multi Agent System for Flow-Based Intrusion Detection Using Reputation and Evolutionary Computation - Brossura

Hancock, David L.

Brossura

ISBN 10: 1249586658 ISBN 13: 9781249586654

Casa editrice: LIGHTNING SOURCE INC, 2012

Riassunto

The rising sophistication of cyber threats as well as the improvement of physical computer network properties present increasing challenges to contemporary Intrusion Detection (ID) techniques. To respond to these challenges, a multi agent system (MAS) coupled with flow-based ID techniques may effectively complement traditional ID systems. This paper develops: 1) a scalable software architecture for a new, self-organized, multi agent, flow-based ID system; and 2) a network simulation environment suitable for evaluating implementations of this MAS architecture and for other research purposes. Self-organization is achieved via 1) a "reputation" system that influences agent mobility in the search for effective vantage points in the network; and 2) multi objective evolutionary algorithms that seek effective operational parameter values. This paper illustrates, through quantitative and qualitative evaluation, 1) the conditions for which the reputation system provides a significant benefit; and 2) essential functionality of a complex network simulation environment supporting a broad range of malicious activity scenarios. These results establish an optimistic outlook for further research in flow-based multi agent systems for ID in computer networks.

Dettagli dell'edizione

• Editore: LIGHTNING SOURCE INC
• Data di pubblicazione: 2012
• Lingua: Inglese
• ISBN 10: 1249586658
• ISBN 13: 9781249586654
• Rilegatura: Copertina flessibile
• Numero di pagine: 182
• Contatto del produttore: non disponibile
• Persona responsabile: non disponibile