{"title":"An Intelligent Agent Based Approach for Intrusion Detection and Prevention in Adhoc Networks","authors":"S. Veeraraghavan, S. Bose, K. Anand, A. Kannan","doi":"10.1109/ICSCN.2007.350658","DOIUrl":null,"url":null,"abstract":"This paper describes about an intelligent agent based intrusion detection and prevention system for mobile ad hoc network. This system collects data from application layer and network layer and classifies them using the log file data collected from these layers and local anomalies are computed using local agents finally it is sent to a global agent for integration. The local agents monitor the two layers of the network to determine the correlation among the observed anomalous patterns, reporting such abnormal behavior to the administrator for taking possible action. Our simulation results obtained after integration shows that it is possible to obtain high intrusion-detection rates (99.2%) and low false-alarm rates","PeriodicalId":257948,"journal":{"name":"2007 International Conference on Signal Processing, Communications and Networking","volume":"38 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2007-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"13","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2007 International Conference on Signal Processing, Communications and Networking","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICSCN.2007.350658","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 13
Abstract
This paper describes about an intelligent agent based intrusion detection and prevention system for mobile ad hoc network. This system collects data from application layer and network layer and classifies them using the log file data collected from these layers and local anomalies are computed using local agents finally it is sent to a global agent for integration. The local agents monitor the two layers of the network to determine the correlation among the observed anomalous patterns, reporting such abnormal behavior to the administrator for taking possible action. Our simulation results obtained after integration shows that it is possible to obtain high intrusion-detection rates (99.2%) and low false-alarm rates