Mobile agents for computer intrusion detection

Abstract

In the age of the Internet, computer intrusion detections are at best a black art. The science to perceive, track, and understand intrusions is still at its infancy. Many different technologies and topologies are under investigation to see which model provides adequate data for intrusion detection. In this paper, we present a platform independent Java-based mobile agent intrusion detection system (IDS). In our prototype mobile agent IDS, the focus is on port scanning and file integrity checking. The mobile agents are implemented using the Concordia mobile agent development kit. The performance and memory resources required to run these mobile agents are discussed.