A preliminary application of mobile agents to intrusion detection

Abstract

This work presents an application of mobile agents to the topic of intrusion detection. The presented solution implements a distributed system based on agents with the capability of mobility, in such a way that when an abnormal event is detected, the agent located at the host where detection was performed moves across the network modifying the firewall rules of the involved hosts to implement a kind of prevention of the probably on going attack.