Intrusion detection systems (IDSs) are exposed to highly dynamic and demanding environments. Moreover, analysis engines based on either signature recognition or anomaly detection most often are large modules which consume a significant amount of resources. In distributed IDSs individual monitoring entities are capable of detecting local intrusions based on performed observations. In this paper we propose that agents are assigned some collection of monitoring tasks, which need varying amount of computational resources. These needs vary over time causing occasional overload of single monitoring entities and resulting in a need for tasks’ reassignment. An analysis performed on distant objects brings an additional load over the system. Therefore to reduce an additional network traffic invoked by multi-object reassignment a method of single object’s delegation is proposed, based on neighbours’ lists and distances between monitoring agents and observed objects. Designed solution has been implemented with JADE and compared with a random delegation solution.
Weitere Kapitel dieses Buchs durch Wischen aufrufen
Bitte loggen Sie sich ein, um Zugang zu diesem Inhalt zu erhalten
Sie möchten Zugang zu diesem Inhalt erhalten? Dann informieren Sie sich jetzt über unsere Produkte:
- Multiagent Approach to Autonomous Reorganization of Monitoring Task Delegation in Distributed IDS
- Springer Berlin Heidelberg
in-adhesives, MKVS, Hellmich GmbH/© Hellmich GmbH, Zühlke/© Zühlke