Intrusion Detection with Mobile Agents

Published

June 1, 2002

Author(s)

Wayne Jansen

Abstract

Effective intrusion detection capability is an elusive goal, not solved easily or with a single mechanism. However, mobile software agents go a long way toward realizing the ideal behavior desired in an Intrusion Detection System (IDS). This paper is an initial look at the relatively unexplored terrain of using mobile agents for intrusion detection and response. It looks not only at the benefits derived from mobility, but also those associated with software agent technology. We explore these benefits in some detail and propose a number of innovative ways to apply agent mobility to address the shortcomings of current IDS designs and implementations. We also look at new approaches for automating response to an intrusion, once detected.

Proceedings Title

Canadian Information Technology Security, Symposium | | Computer Communications | IPC Science and Technology Press

Volume

25

Issue

No. 15

Conference Dates

June 19-23, 2000

Conference Location

Ottawa, CA

Conference Title

Computer Communications

Pub Type

Conferences

Download Paper

Local Download

Keywords

intrusion detection, intrusion response, mobile agents

Citation

Jansen, W. (2002), Intrusion Detection with Mobile Agents, Canadian Information Technology Security, Symposium | | Computer Communications | IPC Science and Technology Press, Ottawa, CA, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=151209 (Accessed October 18, 2025)